{"data":{"id":"e42bb29a-ce1f-4c2c-b055-3e2c87c581d5","title":"GHSA-98xf-r82g-9mhx: LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access","summary":"LangGraph's `MongoDBSaver` in `@langchain/langgraph-checkpoint-mongodb` used `thread_id`, `checkpoint_ns` and `checkpoint_id` from `config.configurable` in MongoDB `find()` queries without strict type checks. Attacker-supplied operator objects such as `$gt` and `$ne` could be treated as query operators, letting them return checkpoints from other tenants, including state, metadata and pending writes.","solution":"Fixed in @langchain/langgraph-checkpoint-mongodb 1.3.1, which adds runtime validation for configurable checkpoint identifiers and rejects invalid values before query and write paths run. Upgrade to 1.3.1 or later. Validate identifier fields at API boundaries and avoid passing raw client objects into graph config.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-98xf-r82g-9mhx","publishedAt":"2026-06-12T15:05:32.000Z","cveId":"CVE-2026-48121","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":["@langchain/langgraph-checkpoint-mongodb@<= 1.3.0 (fixed: 1.3.1)"],"affectedPackageNames":["@langchain/langgraph-checkpoint-mongodb"],"affectedPackageRefs":["npm:@langchain/langgraph-checkpoint-mongodb"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","MongoDBSaver","@langchain/langgraph-checkpoint-mongodb"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00355,"epssCheckedAt":"2026-11-04T18:09:14.469Z","kevDateAdded":null,"advisoryAliases":["GHSA-98xf-r82g-9mhx"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-06-12T15:05:32.000Z","fixReleasedAt":"2026-05-18T22:51:08.389Z","daysToFix":-25,"fixCheckedAt":"2026-10-29T21:34:41.173Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"npm","name":"@langchain/langgraph-checkpoint-mongodb","fixedVersion":"1.3.1","matchedVersion":"1.3.1","fixReleasedAt":"2026-05-18T22:51:08.389Z","daysToFix":-25,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:41.016Z"}]}}