ZDF
Sign inSign up

Vulnerabilities

Security fix · CVE-2026-115883

LangGraph: Namespace labels containing reach other namespaces in Postgres and SQLite stores

Published Oct 23, 2026 · catalog updated Oct 23, 2026 · LangGraph: Namespace labels containing

Last checked Oct 28, 2026. A connected source was read within the last 7 days.

Check if you run it

No confirmed exploitation is on record for CVE-2026-115883. EPSS is 0.30%. Act only if a listed version of LangGraph: Namespace labels containing is installed.

Gaps on this record

  • The stored product name is a package slug. The name on this page is taken from the title (LangGraph: Namespace labels containing).
  • No vendor fix or required action is stored. Compare the linked advisory before you change production.

Same product and reporting

Severity
Medium6.0
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.30%
Remediation
Version ranges on file
Affected products
package pip · pip langgraph-checkpoint-postgres · pip langgraph-checkpoint-sqlite · pypi langgraph-checkpoint-postgres · pypi langgraph-checkpoint-sqlite · vendor langchain-ai langgraph

### Summary The Postgres and SQLite stores save a namespace as its labels joined with , so and map to the same stored namespace. rejected labels containing , but , , , , their async versions, and ops passed directly to / did not. A caller that could pass such a label could read, overwrite or delete items in another namespace. ### Details checked namespace labels only in / . The other methods passed the namespace on unchecked, and / checked nothing, including the items inside them. , , and turn a namespace into text with , so a label containing resolved to the namespace whose labels it spells out: - , and returned data stored under . - deleted the item stored under . - overwrote the item stored under . All releases of before 3.1.3 and before 3.1.2 are affected. compares namespaces as tuples and is not affected. ### Impact You may be affected if you use one of these stores, rely on namespaces to keep users or tenants apart, and let untrusted input choose a namespace label that reaches a read, delete or call. Such input could read, overwrite or delete another tenant's items. Labels written through could never contain , so no stored data becomes unreachable after upgrading. LangSmith Deployment: the HTTP store API already rejected such labels, but store calls made from graph code reached the same flaw. The Agent Server rejects these labels from versions 0.15.5 and 0.16.2. On LangSmith Cloud, new deployments and revisions already include the fix and existing deployments get it on their next revision; self-hosted deployments should upgrade. ### Remediation Upgrade to 3.1.3 or 3.1.2. Both require 4.3.0, where , , and reject labels that are empty, are not strings, or contain with , and the Postgres and SQLite stores apply the same check to every op passed to / . Stores outside this repository that turn namespaces into delimited text can call for each op they run.

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • package pipversion unspecified
  • pip langgraph-checkpoint-postgres< 3.1.3
  • pip langgraph-checkpoint-sqlite< 3.1.2
  • pypi langgraph-checkpoint-postgresversion unspecified
  • pypi langgraph-checkpoint-sqliteversion unspecified
  • vendor langchain-ai langgraphversion unspecified
  • vendor langchain-ai langgraph-checkpoint-postgresversion unspecified
  • vendor langchain-ai langgraph-checkpoint-sqliteversion unspecified

How to fix CVE-2026-115883

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

No confirmed exploitation is on record for CVE-2026-115883. EPSS is 0.30%. Act only if a listed version of LangGraph: Namespace labels containing is installed.

Which versions are affected?

Compare what you have installed with < 3.1.3, < 3.1.2. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

CWE-20: Improper Input Validation; CWE-863: Incorrect Authorization. EPSS 0.30%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Technology hubs

PostgreSQL security

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 23, 2026 · GitHub Advisory Database

    Detected

    ### Summary The Postgres and SQLite stores save a namespace as its labels joined with , so and map to the same stored namespace. rejected labels containing , but , , , , their async versions, and ops passed directly to / did not. A caller that could pass such a label could read, overwrite or delete items in another namespace. ### Details checked namespace labels only in / . The other methods passe

  2. Oct 23, 2026 · GitHub Advisory Database

    Updated

    ### Summary The Postgres and SQLite stores save a namespace as its labels joined with , so and map to the same stored namespace. rejected labels containing , but , , , , their async versions, and ops passed directly to / did not. A caller that could pass such a label could read, overwrite or delete items in another namespace. ### Details checked namespace labels only in / . The other methods passe

Sources

  • CVE.orgVulnerability recordCVE-2026-115883

    LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, SqliteStore, and AsyncSqliteStore flatten n

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-115883

    30-day exploitation probability 0.30%

    first.org
  • GitHub Advisory DatabasePackage advisoryGHSA-6hmw-9432-67qq

    LangGraph: Namespace labels containing reach other namespaces in Postgres and SQLite stores

    github.com
  • GitLab Advisory DatabasePackage advisoryCVE-2026-115883

    The Postgres and SQLite stores save a namespace as its labels joined with ., so ("tenant", "bob") and ("tenant.bob",) map to the same stored namespace. put rejected labels containing ., but get, search, delete, list_namespaces, their async versions, and ops passed directly to batch/abatch did not. A caller that could pass such a label could read, overwrite or delete items in another namespace.

    advisories.gitlab.com
  • GitLab Advisory DatabasePackage advisorypypi/langgraph-checkpoint-postgres/CVE-2026-115883.yml

    The Postgres and SQLite stores save a namespace as its labels join , their async versions, and ops passed directly to / did not. A caller that could pass such a label could read, overwrite or delete items in another namespace." -date: "2026-10-23" +date: "2026-10-25" pubdate: "2026-10-23" affected_range: "<3.1.3" fixed_versions:

    gitlab.com
  • GitLab Advisory DatabasePackage advisorypypi/langgraph-checkpoint-sqlite/CVE-2026-115883.yml

    The Postgres and SQLite stores save a namespace as its labels join , their async versions, and ops passed directly to / did not. A caller that could pass such a label could read, overwrite or delete items in another namespace." -date: "2026-10-23" +date: "2026-10-25" pubdate: "2026-10-23" affected_range: "<3.1.2" fixed_versions:

    gitlab.com
  • Snyk Vulnerability DatabasePackage advisorySNYK-PYTHON-LANGGRAPHCHECKPOINTPOSTGRES-21663385

    Use of Incorrectly-Resolved Name or Reference

    security.snyk.io
  • Snyk Vulnerability DatabasePackage advisorySNYK-PYTHON-LANGGRAPHCHECKPOINTSQLITE-21663386

    Use of Incorrectly-Resolved Name or Reference

    security.snyk.io

References

Freshness

Last verified in this catalog Oct 28, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.

  • FIRST EPSSOct 28, 2026
  • GitLab Advisory DatabaseOct 27, 2026
  • GitLab Advisory DatabaseOct 26, 2026
  • GitLab Advisory DatabaseOct 26, 2026
  • Snyk Vulnerability DatabaseOct 26, 2026
  • Snyk Vulnerability DatabaseOct 26, 2026
  • CVE.orgOct 25, 2026
  • GitHub Advisory DatabaseOct 24, 2026