CVE-2026-28277CWE-502

LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading

Medium · published March 5, 2026

CVSS v3.1
6.8
EPSS
1%
Percentile
51.1
In the wild
Unconfirmed
What it is

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can modify checkpoint data in the backing store (for example, after a database compromise or other privileged write access to the persistence layer), they can potentially supply a crafted payload that triggers unsafe object reconstruction when the checkpoint is loaded. No known patch is public.

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00663 · 51.1th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-03-05T19:10Z
EPSS history
Timeline
  • 05 MAR 19:10Z
    LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading
    cvelistv5