What’s Vulnerable › Products

langchain-ai langgraph vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your langchain-ai langgraph version is affected

Latest langchain-ai langgraph vulnerabilities

• CVE-2026-115885 — LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output (CVSS 4.1)
• CVE-2026-115883 — LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores (CVSS 6.0)
• CVE-2026-104873 — LangGraph SDK custom auth silently ignores actions= on resource decorators (CVSS 7.6)
• CVE-2026-71433 — LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores (CVSS 5.3)
• CVE-2026-14742 — langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash (CVSS 3.1)
• CVE-2026-28277 — LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading (CVSS 7.2)
• CVE-2025-64439 — LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer (CVSS 7.4)
• CVE-2025-64104 — LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore (CVSS 7.3)