CVE-2026-71433

Received Received - Intake

Namespace Bypass in LangGraph Checkpoint Postgres and SQLite

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: GitHub, Inc.

Description

LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by matching that string as a simple prefix pattern, so a read scoped to one namespace could also match a sibling namespace whose flattened form shares the same leading characters, or a namespace label containing unescaped pattern metacharacters, allowing an authenticated caller to retrieve stored items belonging to another tenant or user through an ordinary scoped search or list namespaces call, with no crafted input required. This issue is fixed in versions 3.1.1 of langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-71433

Affected Vendors & Products

Vendor	Product	Version / Range
langgraph	langgraph-checkpoint-postgres	3.1.1
langgraph	langgraph-checkpoint-sqlite	3.1.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-863	The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

Executive Summary

This vulnerability affects LangGraph Checkpoint Postgres and SQLite implementations before version 3.1.1. It involves how hierarchical namespaces are stored and accessed. The system uses dot-joined strings to represent namespaces and matches them with simple prefix patterns during reads. This allows a read scoped to one namespace to unintentionally match sibling namespaces or namespaces with similar leading characters, potentially exposing data belonging to another tenant or user without requiring crafted input.

Impact Analysis

If you use LangGraph Checkpoint Postgres or SQLite versions before 3.1.1, an authenticated attacker could access data belonging to other tenants or users through normal scoped searches or list operations. This could lead to unauthorized data exposure, privacy breaches, or information leakage within a multi-tenant environment.

Compliance Impact

This vulnerability could violate data protection regulations like GDPR and HIPAA by enabling unauthorized access to sensitive user or patient data. GDPR requires strict data isolation and access controls, while HIPAA mandates safeguards for protected health information. The flaw undermines these requirements by allowing cross-tenant data exposure, potentially leading to compliance violations and legal consequences.

Mitigation Strategies

Upgrade langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite to version 3.1.1 or later to address the namespace access issue.

Hi! I’m here to help you understand CVE-2026-71433. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70