Executive brief
LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method
Affected products
- PyPI langgraph-checkpoint-sqlite
Junglewise Threat Intelligence
CVE-2025-67644: PYSEC-2026-1530 - LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method
CVE-2025-67644 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: langgraph-checkpoint-sqlite (PyPI). Vendors: PyPI.