CVE-2026-71433

Name of the Vulnerable Software and Affected Versions langgraph-checkpoint-postgres versions prior to 3.1.1 langgraph-checkpoint-sqlite versions prior to 3.1.1

Description The Postgres and SQLite implementations of LangGraph's checkpoint saver persist hierarchical namespaces as dot-joined strings. Scoped reads are performed by matching these strings as simple prefix patterns using the LIKE operator. Because LIKE does not recognize the dot separator, a read scoped to one namespace can match sibling namespaces that share the same leading characters. Additionally, namespace labels containing unescaped pattern metacharacters such as or % can lead to incorrect matches. This allows an authenticated caller to retrieve stored items belonging to another tenant or user through an ordinary scoped search or list namespaces call. This issue is limited to read paths and does not affect get, put, or delete operations.

Recommendations Update langgraph-checkpoint-postgres to version 3.1.1. Update langgraph-checkpoint-sqlite to version 3.1.1. Prefer the use of fixed-length namespace labels, such as UUIDs, to ensure no label can be a prefix of another. Validate user-supplied labels at the boundary instead of relying solely on scoping.