{"data":{"id":"81fe28c4-2efc-4726-aff7-e15517be9588","title":"CVE-2025-8709: A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite…","summary":"A SQL injection flaw in the LangGraph SQLite store implementation in the langchain-ai/langchain repository affects langgraph-checkpoint-sqlite 2.0.10. Filter operators ($eq, $ne, $gt, $lt, $gte, $lte) are concatenated into SQL strings without parameterization, letting attackers inject arbitrary SQL. Successful exploitation grants unauthorized access to all documents, exfiltration of sensitive fields such as passwords and API keys, and a complete bypass of application-level security filters.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-8709","publishedAt":"2025-10-26T10:15:48.680Z","cveId":"CVE-2025-8709","cweIds":["CWE-89"],"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langgraph-checkpoint-sqlite@<= 2.0.10 (fixed: 2.0.11)"],"affectedPackageNames":["langgraph-checkpoint-sqlite"],"affectedPackageRefs":["pypi:langgraph-checkpoint-sqlite"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","langgraph-checkpoint-sqlite 2.0.10","langchain-ai/langchain"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"langgraph-checkpoint-sqlite SQL injection in SQLite store filter operators","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0022,"epssCheckedAt":"2026-11-04T12:08:33.690Z","kevDateAdded":null,"advisoryAliases":["GHSA-4h97-wpxp-3757"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:52:14.197Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-07-25T17:32:06.355Z","daysToFix":-93,"fixCheckedAt":"2026-10-29T21:43:23.099Z","capecIds":["CAPEC-66"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langgraph-checkpoint-sqlite","fixedVersion":"2.0.11","matchedVersion":"2.0.11","fixReleasedAt":"2025-07-25T17:32:06.355Z","daysToFix":-93,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:43:22.927Z"}]}}