By vendor

Langchain vulnerabilities

Known CVEs affecting Langchain products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-48775MEDIUM 6.8

  LangGraph SQLite Checkpoint, a data persistence component in LangGraph, can deserialize untrusted Python objects from checkpoint files stored in SQLite databases. If an attacker gains write access to the checkpoint storage backend, they can inject malicious serialized objects that execute arbitrary code when the application loads a checkpoint. This is a defense-in-depth vulnerability—it requires an attacker to first compromise the underlying storage layer, but if they do, they can escalate that access to runtime code execution. The issue affects versions 4.1.0 and earlier; version 4.1.1 and later contain a fix.