---
id: CVE-2026-71433
title: >-
  LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and
  SQLite implementations of LangGraph's checkpoint saver
summary: >-
  LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and
  SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the
  langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages
  persisted hierarc…
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-200
  - CWE-863
vendor: langgraph-checkpoint-postgres
product: langgraph-checkpoint-postgres
affected:
  - langgraph-checkpoint-postgres < 3.1.1
  - langgraph-checkpoint-sqlite < 3.1.1
patched:
  - langgraph-checkpoint-postgres 3.1.1
  - langgraph-checkpoint-sqlite 3.1.1
published: '2026-08-06'
updated: '2026-09-10'
sourceUpdated: '2026-09-10T20:41:33.140'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-71433'
references:
  - url: >-
      https://github.com/langchain-ai/langgraph/commit/66ebe1a0da921e73f0f9f879ba105d314c079f7c
    label: security-advisories@github.com
  - url: 'https://github.com/langchain-ai/langgraph/pull/8478'
    label: security-advisories@github.com
  - url: >-
      https://github.com/langchain-ai/langgraph/releases/tag/checkpointpostgres%3D%3D3.1.1
    label: security-advisories@github.com
  - url: >-
      https://github.com/langchain-ai/langgraph/releases/tag/checkpointsqlite%3D%3D3.1.1
    label: security-advisories@github.com
  - url: >-
      https://github.com/langchain-ai/langgraph/security/advisories/GHSA-47pj-3jcm-6whg
    label: security-advisories@github.com
  - url: 'https://github.com/advisories/GHSA-47pj-3jcm-6whg'
tags:
  - nvd
  - ghsa
  - pip
epss: 0.00225
epssPercentile: 0.13456
aliases:
  - GHSA-47pj-3jcm-6whg
ecosystem: pip
ingestedAt: '2026-08-06T20:03:56.720Z'
---

## Overview

LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by matching that string as a simple prefix pattern, so a read scoped to one namespace could also match a sibling namespace whose flattened form shares the same leading characters, or a namespace label containing unescaped pattern metacharacters, allowing an authenticated caller to retrieve stored items belonging to another tenant or user through an ordinary scoped search or list namespaces call, with no crafted input required. This issue is fixed in versions 3.1.1 of langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-71433)

Affected packages:

- `langgraph-checkpoint-postgres < 3.1.1`
- `langgraph-checkpoint-sqlite < 3.1.1`

Patched in:

- `langgraph-checkpoint-postgres 3.1.1`
- `langgraph-checkpoint-sqlite 3.1.1`

Source: https://github.com/advisories/GHSA-47pj-3jcm-6whg