Deserialization in Langchain Langgraph
CVE-2026-28277
LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.
Vulnerability class: Insecure Deserialization
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.055 (92.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 93rd percentile — 92.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.007 · newest: 0.055 · change: +0.048
Affected products
- Langchain Langgraph
- Langchain-Ai Langgraph — versions <= 1.0.9
Weakness classification (CWE)
References
- github.com/langchain-ai/langgraph/security/advisories/GHSA-g48c-2wqr-h844 (Mitigation, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-28277?
- CVE-2026-28277 is a medium-severity vulnerability in Langchain Langgraph, classified under Deserialization of Untrusted Data. CVSS score: 6.8/10. Published 2026-03-05.
- How severe is CVE-2026-28277?
- Medium severity. CVSS v3 base score is 6.8 out of 10.