Detections
Analytics
SCA: security update for langgraph-checkpoint (GHSA-mhr3-j7m5-c7c9)
medium Tenable Cloud Security Plugin ID 438063
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- LangGraph Checkpoint defines the base interface for LangGraph checkpointers. Prior to version 4.0.0, a
Remote Code Execution vulnerability exists in LangGraph's caching layer when applications enable cache
backends that inherit from `BaseCache` and opt nodes into caching via `CachePolicy`. Prior to `langgraph-
checkpoint` 4.0.0, `BaseCache` defaults to `JsonPlusSerializer(pickle_fallback=True)`. When msgpack
serialization fails, cached values can be deserialized via `pickle.loads(...)`. Caching is not enabled by
default. Applications are affected only when the application explicitly enables a cache backend (for
example by passing `cache=...` to `StateGraph.compile(...)` or otherwise configuring a `BaseCache`
implementation), one or more nodes opt into caching via `CachePolicy`, and the attacker can write to the
cache backend (for example a network-accessible Redis instance with weak/no auth, shared cache
infrastructure reachable by other tenants/services, or a writable SQLite cache file). An attacker must be
able to write attacker-controlled bytes into the cache backend such that the LangGraph process later reads
and deserializes them. This typically requires write access to a networked cache (for example a network-
accessible Redis instance with weak/no auth or shared cache infrastructure reachable by other
tenants/services) or write access to local cache storage (for example a writable SQLite cache file via
permissive file permissions or a shared writable volume). Because exploitation requires write access to
the cache storage layer, this is a post-compromise / post-access escalation vector. LangGraph Checkpoint
4.0.0 patches the issue. (CVE-2026-27794)
See Also
Plugin Details
Severity: Medium
ID: 438063
Version: Revision 1.6
Type: Local
Family: SCA Checks
Published: 3/3/2026
Updated: 6/1/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 6.9
Percentile: 96.95
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5
Vector: CVSS2#AV:N/AC:H/Au:M/C:C/I:C/A:C
CVSS Score Source: CVE-2026-27794
CVSS v3
Risk Factor: Medium
Base Score: 6.6
Temporal Score: 5.8
Vector: CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 2/25/2026
Vulnerability Publication Date: 2/25/2026
Reference Information
CVE: CVE-2026-27794
cwe: CWE-502