High · published December 11, 2025
⚡ Just add a malicious metadata filter key, and you've got SQL injection on your hands! This sneaky vulnerability in LangGraph SQLite Checkpoint could let attackers pull a fast one on your database. 🔥 Think of it as a restaurant kitchen accepting order tickets with special instructions. If the chef mistakenly cooks a dish based on a poorly written request, it could lead to a culinary disaster—similarly, an unvalidated metadata key can manipulate SQL queries directly. An attacker could exploit this vulnerability to execute unauthorized SQL commands, potentially leading to data breaches, data loss, or even complete system compromise. The consequences could be absolutely devastating, impacting not just the integrity of your data but also the trust of your users and stakeholders.
Think of it as a restaurant kitchen accepting order tickets with special instructions. If the chef mistakenly cooks a dish based on a poorly written request, it could lead to a culinary disaster—similarly, an unvalidated metadata key can manipulate SQL queries directly. This SQL injection vulnerability arises because the _metadata_predicate() function directly interpolates untrusted metadata filter keys into SQL queries using f-strings, allowing attackers to manipulate the queries without proper validation.
An attacker could exploit this vulnerability to execute unauthorized SQL commands, potentially leading to data breaches, data loss, or even complete system compromise. The consequences could be absolutely devastating, impacting not just the integrity of your data but also the trust of your users and stakeholders. Upgrade to LangGraph SQLite Checkpoint version 3.0.1 immediately to patch this vulnerability. Additionally, review your code for any usage of untrusted metadata filter keys and implement strict validation to prevent future attacks. You've got this! By taking these steps, you'll secure your application and maintain your hero status! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| langchain/langgraph-checkpoint-sqlite | < 3.0.1 | 3.0.1 |