LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both
    sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-
    encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify
    checkpoint data in the backing store (for example, after a database compromise or other privileged write
    access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe
    object reconstruction when the checkpoint is loaded. No known patch is public. (CVE-2026-28277)

ID	Name	Product	Family	Type	Severity
461702	Echo: langgraph: security update to 1.0.10	Tenable Cloud Security	Echo Local Security Checks	Local	high
461702	Echo: langgraph: security update to 1.0.10	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
438528	SCA: security update for langgraph (GHSA-g48c-2wqr-h844)	Tenable Cloud Security	SCA Checks	Local	high
438528	SCA: security update for langgraph (GHSA-g48c-2wqr-h844)	Tenable Self-Hosted Container Security	SCA Checks	Local	high

Detections

Analytics

CVE-2026-28277

high

Tenable Plugins

high

high

high

high