SQL Injection Vulnerability in LangGraph SQLite Checkpoint by LangChain AI

CVE-2025-67644

What is CVE-2025-67644?

The LangGraph SQLite Checkpoint, part of the LangGraph CheckpointSaver suite, exposed a critical SQL injection flaw that affects all versions up to 3.0.0. This vulnerability arises from improper handling of user-supplied metadata filter keys, allowing attackers to manipulate SQL queries via the checkpoint mechanism. The vulnerable _metadata_predicate() function constructs SQL queries by directly inserting unvalidated filter keys into f-strings, posing a significant risk to applications that rely on these untrusted keys during checkpoint search operations. Version 3.0.1 addresses this issue, ensuring safer SQL query construction.

References