CVE-2026-115883 · GHSA-6hmw-9432-67qq

LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

Risk score: 48/100
CVSS: 6.0 v4.0
Exploit chance (30 days): 0.4%
Published: 23 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels with ".".join(namespace…
Affected: langgraph-checkpoint-postgres (pip) < 3.1.3; langgraph-checkpoint-sqlite (pip) < 3.1.2
Fix: Upgrade langgraph-checkpoint-postgres to 3.1.3; langgraph-checkpoint-sqlite to 3.1.2 or later.
Exploitation: No known exploitation

Why it is Yellow

CVSS 6.0 medium
On your watchlist: PyPI

Affected packages

Package	Ecosystem	Vulnerable	Fixed in
langgraph-checkpoint-postgres	pip	< 3.1.3	3.1.3
langgraph-checkpoint-sqlite	pip	< 3.1.2	3.1.2

References

Original description

LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten namespace labels with ".".join(namespace), while BaseStore validates labels only for put and aput. Unvalidated dotted labels passed through get, search, delete, list_namespaces, their asynchronous equivalents, or direct batch and abatch operations can resolve to another tenant's stored namespace, allowing cross-namespace reads, overwrites, or deletion. InMemoryStore is not affected because it compares namespace tuples. This issue is fixed in langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2.

Last activity 23 Oct 2026. Patch Forecast updates every hour.