CVE-2025-64104

The record

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). Prior to 2.0.11, LangGraph's SQLite store implementation contains SQL injection vulnerabilities using direct string concatenation without proper parameterization, allowing attackers to inject arbitrary SQL and bypass access controls. This vulnerability is fixed in 2.0.11.

Affected packages

Related vulnerabilities

• GHSA-7p73-8jqx-23r8 LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore Same vulnerability
• CVE-2025-67644 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses… Also affects langgraph-checkpoint-sqlite
• GHSA-9rwj-6rc7-p77c LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite… Also affects langgraph-checkpoint-sqlite
• GHSA-4h97-wpxp-3757 LangGraph's SQLite store implementation has a SQL Injection Vulnerability Also affects langgraph-checkpoint-sqlite
• CVE-2025-8709 A SQL injection vulnerability exists in the langchain-ai/langchain repository… Also affects langgraph-checkpoint-sqlite
• CVE-2026-87936 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
• CVE-2026-87938 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
• CVE-2026-114664 Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the… CWE-89