CVE-2026-48775

Name of the Vulnerable Software and Affected Versions LangGraph SQLite Checkpoint versions prior to 4.1.1

Description The JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. If an unauthorized party modifies checkpoint bytes at rest in the backing store, the deserialization path may reconstruct unexpected objects, potentially leading to code execution when the checkpoint is loaded. This is a defense-in-depth issue that requires the attacker to already have write access to the checkpoint store.

Recommendations Update to version 4.1.1.