A vulnerability in LangGraph's Postgres and SQLite checkpoint stores allowed namespace labels containing dots to reach other namespaces, enabling attackers to read, overwrite, or delete items in other tenants' data. The flaw affected get, search, delete, list_namespaces, and batch operations.
Disclosed 23 October 2026 · Record updated 23 October 2026
Multi-tenant data isolation bypass allowing unauthorized read, write, and delete access to other tenants' stored items in affected checkpoint stores.
VulnerabilitiesA namespace check missing from read and delete calls meant a single dot in a label could cross tenant boundaries, LangChain said in an advisory published on 23 October 2026.
23 Oct 2026
