CVE-2026-48775

[CVE catalog]

Severity

Medium · CVSS 6.8

Published

Jun 16, 2026, 5:53:10 PM UTC

Source

[NVD] · [CVE record]

EPSS

0.23% · Oct 25, 2026

A flaw was found in LangGraph. This vulnerability allows an attacker with high privileges and adjacent network access to modify checkpoint data. By manipulating these stored checkpoint bytes, an attacker can trigger insecure deserialization, leading to arbitrary code execution when the checkpoint is loaded. This issue is considered a defense-in-depth concern, as it requires prior unauthorized access to the checkpoint's backing store. langgraph: langgraph-checkpoint: LangGraph: Arbitrary code execution via insecure deserialization of modified checkpoint bytes A flaw was found in LangGraph's SQLite checkpoint implementation. The JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. If an attacker gains write access to the checkpoint backing store, they can modify checkpoint bytes to achieve code execution at checkpoint load time. This is a defense-in-depth issue — the prerequisite of checkpoint-store write access already implies a serious incident in most deployments. The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.