CVE-2025-8709

The record

A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators ($eq, $ne, $gt, $lt, $gte, $lte) where direct string concatenation is used without proper parameterization. This allows attackers to inject arbitrary SQL, leading to unauthorized access to all documents, data exfiltration of sensitive fields such as passwords and API keys, and a complete bypass of application-level security filters.

Affected packages

Related vulnerabilities

• GHSA-4h97-wpxp-3757 LangGraph's SQLite store implementation has a SQL Injection Vulnerability Same vulnerability
• CVE-2025-67644 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses… Also affects langgraph-checkpoint-sqlite
• GHSA-9rwj-6rc7-p77c LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite… Also affects langgraph-checkpoint-sqlite
• GHSA-7p73-8jqx-23r8 LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore Also affects langgraph-checkpoint-sqlite
• CVE-2025-64104 LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses… Also affects langgraph-checkpoint-sqlite
• CVE-2026-87936 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
• CVE-2026-87938 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')… CWE-89
• CVE-2026-114664 Frappe Framework before 16.33.0 contains a blind SQL injection vulnerability in the… CWE-89