CVE database · Agent frameworks and SDKs
LangGraph vulnerabilities and CVEs
The Beam CVE database tracks 4 security advisories for LangGraph: 1 high and 3 medium severity. The newest is CVE-2026-48775, published Jun 25, 2026 and fixed in 4.1.1.
LangChain's framework for stateful, multi-step agents, with checkpoint storage.
Check your version: pip show langgraph or pip show langgraph-checkpoint or npm ls @langchain/langgraph
- Vulnerabilities tracked
- 4
- Critical
- 0
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-48775
LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
medium6.8Jun 25, 2026CVE-2026-28277
LangGraph checkpoint loading has unsafe msgpack deserialization
medium6.8Mar 5, 2026CVE-2026-27794
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
medium6.6Feb 25, 2026CVE-2025-64439
LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
high7.4Nov 5, 2025