Langgraph (Langchain-ai) - vulnerabilities (CVEs)
10 CVEs, 4 in the last 30 days, 7 known versions, newest CVE from 2026-10-28. Vendor: Langchain-ai.
CVEs of Langgraph
- CVE-2026-118667 - CVSS 4.3 (medium), 2026-10-28: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From…
- CVE-2026-115885 - CVSS 4.1 (medium), 2026-10-23: The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push…
- CVE-2026-115883 - CVSS 6 (medium), 2026-10-23: LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres…
- CVE-2026-104873 - CVSS 7.6 (high), 2026-10-02: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45…
- CVE-2026-71433 - CVSS 5.3 (medium), 2026-08-06: LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the…
- CVE-2026-14742 - CVSS 3.1 (low), 2026-07-05: A vulnerability was determined in langchain-ai langgraph up to 1.2.4. The affected element is the function _freeze of the file…
- CVE-2026-48775 - CVSS 6.8 (medium), 2026-06-16: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and…
- CVE-2026-28277 - CVSS 7.2 (high), 2026-03-05: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and…
- CVE-2025-67644 - CVSS 7.8 (high), 2025-12-11: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Versions 3.0.0 and…
- CVE-2025-64439 - CVSS 7.4 (high), 2025-11-07: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 2.1.2 and…
- CVE-2025-64104 - CVSS 7.3 (high), 2025-10-29: LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11,…
