When Your AI Agent’s Memory Becomes a Security Liability

Check Point Research found a critical vulnerability in LangGraph, a widely-used framework (with 46.5 million monthly downloads) that helps developers build AI agents with memory and state management. An SQL injection (a type of attack where malicious database commands are inserted into user input) in LangGraph could let attackers take complete control of a server through remote code execution (RCE, where attackers run arbitrary commands on a system they don't own), potentially exposing API keys, customer data, and conversation history stored on the compromised system.