{"data":{"id":"59446259-e262-48c6-a95d-ed66daa7ba64","title":"GHSA-5mx2-w598-339m: RediSearch Query Injection in @langchain/langgraph-checkpoint-redis","summary":"The @langchain/langgraph-checkpoint-redis package contains a RediSearch query injection flaw in the list() methods of RedisSaver and ShallowRedisSaver. Filter keys and values are interpolated without escaping, so an attacker controlling a filter value can inject an OR clause such as `}) | (@thread_id:{*` that matches all threads and bypasses thread isolation, exposing checkpoint data from other users in multi-tenant applications.","solution":"The 1.0.2 patch adds an escapeRediSearchTagValue() function that escapes RediSearch special characters and applies escaping to all filter keys before query construction.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-5mx2-w598-339m","publishedAt":"2026-02-18T22:40:09.000Z","cveId":"CVE-2026-27022","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["@langchain/langgraph-checkpoint-redis@< 1.0.2 (fixed: 1.0.2)"],"affectedPackageNames":["@langchain/langgraph-checkpoint-redis"],"affectedPackageRefs":["npm:@langchain/langgraph-checkpoint-redis"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["@langchain/langgraph-checkpoint-redis","LangGraph","RedisSaver","ShallowRedisSaver"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0401,"epssCheckedAt":"2026-11-04T06:10:14.970Z","kevDateAdded":null,"advisoryAliases":["GHSA-5mx2-w598-339m"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":null,"fixReleasedAt":"2026-02-05T02:10:15.751Z","daysToFix":-13,"fixCheckedAt":"2026-10-29T21:40:54.526Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@langchain/langgraph-checkpoint-redis","fixedVersion":"1.0.2","matchedVersion":"1.0.2","fixReleasedAt":"2026-02-05T02:10:15.751Z","daysToFix":-13,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:40:54.378Z"}]}}