langchain-ai langgraph-checkpoint-postgres up to 3.1.0 information disclosure

Summaryinfo

A vulnerability labeled as problematic has been found in langchain-ai langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite up to 3.1.0. This affects an unknown function. Such manipulation leads to information disclosure. This vulnerability is referenced as CVE-2026-71433. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in langchain-ai langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite up to 3.1.0. It has been rated as problematic. Affected by this issue is an unknown part. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. CVE summarizes:

LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by matching that string as a simple prefix pattern, so a read scoped to one namespace could also match a sibling namespace whose flattened form shares the same leading characters, or a namespace label containing unescaped pattern metacharacters, allowing an authenticated caller to retrieve stored items belonging to another tenant or user through an ordinary scoped search or list namespaces call, with no crafted input required. This issue is fixed in versions 3.1.1 of langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite.

The advisory is shared for download at github.com. This vulnerability is handled as CVE-2026-71433 since 08/06/2026. The exploitation is known to be easy. The attack may be launched remotely. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

Upgrading to version 3.1.1 eliminates this vulnerability.

Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Artificial Intelligence Software

Vendor

• langchain-ai

Name

• langgraph-checkpoint-postgres
• langgraph-checkpoint-sqlite

Version

• 3.0
• 3.1.0

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion