5.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): High (H)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): None (N)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): High (H)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): None (N)
- Modified Availability (MA): None (N)
Activity log
- Created suggestion
LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages persisted hierarchical namespaces as a dot joined string and scoped reads by matching that string as a simple prefix pattern, so a read scoped to one namespace could also match a sibling namespace whose flattened form shares the same leading characters, or a namespace label containing unescaped pattern metacharacters, allowing an authenticated caller to retrieve stored items belonging to another tenant or user through an ordinary scoped search or list namespaces call, with no crafted input required. This issue is fixed in versions 3.1.1 of langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite.
References
-
https://github.com/langchain-ai/langgraph/pull/8478 x_refsource_MISC
Affected products
- ==< 3.1.1
- ==< 3.1.1
- ==< 3.1.1
Matching in nixpkgs
pkgs.langgraph-cli
Official CLI for LangGraph API
pkgs.python313Packages.langgraph
Build resilient language agents as graphs
pkgs.python314Packages.langgraph
Build resilient language agents as graphs
pkgs.python313Packages.langgraph-cli
Official CLI for LangGraph API
pkgs.python313Packages.langgraph-sdk
SDK for interacting with the LangGraph Cloud REST API
pkgs.python314Packages.langgraph-cli
Official CLI for LangGraph API
pkgs.python314Packages.langgraph-sdk
SDK for interacting with the LangGraph Cloud REST API
pkgs.python313Packages.langgraph-prebuilt
Prebuilt agents add-on for Langgraph. Should always be bundled with langgraph
pkgs.python314Packages.langgraph-prebuilt
Prebuilt agents add-on for Langgraph. Should always be bundled with langgraph
pkgs.python313Packages.langgraph-checkpoint
Library with base interfaces for LangGraph checkpoint savers
pkgs.python314Packages.langgraph-checkpoint
Library with base interfaces for LangGraph checkpoint savers
pkgs.python313Packages.langgraph-runtime-inmem
Inmem implementation for the LangGraph API server
pkgs.python313Packages.langgraph-store-mongodb
Integrations between MongoDB, Atlas, LangChain, and LangGraph
pkgs.python314Packages.langgraph-runtime-inmem
Inmem implementation for the LangGraph API server
pkgs.python314Packages.langgraph-store-mongodb
Integrations between MongoDB, Atlas, LangChain, and LangGraph
pkgs.python313Packages.langgraph-checkpoint-sqlite
Library with a SQLite implementation of LangGraph checkpoint saver
pkgs.python314Packages.langgraph-checkpoint-sqlite
Library with a SQLite implementation of LangGraph checkpoint saver
pkgs.python313Packages.langgraph-checkpoint-mongodb
Integrations between MongoDB, Atlas, LangChain, and LangGraph
pkgs.python314Packages.langgraph-checkpoint-mongodb
Integrations between MongoDB, Atlas, LangChain, and LangGraph
pkgs.python313Packages.langgraph-checkpoint-postgres
Library with a Postgres implementation of LangGraph checkpoint saver
pkgs.python314Packages.langgraph-checkpoint-postgres
Library with a Postgres implementation of LangGraph checkpoint saver
Package maintainers
-
@sarahec Sarah Clark <seclark@nextquestion.net>