CVE-2026-48121
Received Received - Intake

NoSQL Injection in LangGraph Checkpoint MongoDB

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: GitHub, Inc.

Description
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from config.configurable are passed into MongoDB find() queries in MongoDBSaver.getTuple() without type enforcement. If an attacker supplies an object payload (such as MongoDB operators $gt or $ne) instead of a string, it can be interpreted as a query operator, bypassing thread scoping and leaking checkpoints, including pending writes, across tenants. Applications are at risk if they forward untrusted input into config.configurable without coercing it to strings or validating it against a schema, particularly in multi-tenant or user-isolated setups. Apps that only use server-issued, string-typed identifiers with schema validation rejecting non-string fields are not affected. This issue has been fixed in version 1.3.1.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-48121
EUVD
EUVD-2026-52793

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
langchain langgraph-checkpoint-mongodb to 1.3.1 (exc)
langchain langgraph-checkpoint-mongodb 1.3.1

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-943 The product generates a query intended to access or manipulate data in a data store such as a database, but it does not neutralize or incorrectly neutralizes special elements that can modify the intended logic of the query.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a NoSQL injection flaw in @langchain/langgraph-checkpoint-mongodb versions 1.3.0 and below. It occurs when checkpoint identifiers from untrusted input are passed directly into MongoDB find() queries without type enforcement. Attackers can supply MongoDB operators like $gt or $ne to manipulate queries, bypass thread scoping, and access checkpoints across tenants.

Detection Guidance

To detect this vulnerability, inspect applications using @langchain/langgraph-checkpoint-mongodb versions 1.3.0 or below for untrusted input passed into config.configurable without type enforcement. Check MongoDB query logs for NoSQL injection patterns like $gt or $ne operators in checkpoint identifiers.

Impact Analysis

If you use affected versions in a multi-tenant or user-isolated setup, an attacker could exploit this to leak sensitive checkpoint data, including pending writes, across different tenants or users. This could lead to unauthorized access to other users' data or actions.

Compliance Impact

This vulnerability could lead to data breaches, violating GDPR's data protection requirements and HIPAA's privacy and security rules. Unauthorized access to user data across tenants may result in non-compliance with these regulations, potentially leading to legal penalties and reputational damage.

Mitigation Strategies

Upgrade to version 1.3.1 or later of @langchain/langgraph-checkpoint-mongodb. Ensure checkpoint identifiers are validated as strings and reject non-string fields. Apply schema validation to config.configurable inputs to prevent NoSQL injection.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-48121. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart