Medium, CVSS 6.7npmAmendedPublished
LangGraph has NoSQL parameter injection in MongoDBSaver, allowing cross-tenant state access
CVE-2026-48121 · GHSA-98xf-r82g-9mhx
- Affected
- npm @langchain/langgraph-checkpoint-mongodb <= 1.3.0
- Fixed in
- 1.3.1· Vendor fix available
- Issue
- A NoSQL injection vulnerability existed in MongoDBSaver where checkpoint identifier fields from config.configurable were used in MongoDB queries without strict type enforcement. In vulnerable versions, attacker-controlled object payloads (for example MongoDB operators like $gt and $ne) could be interpreted as query operators instead of literal identifier values. This could bypass intended thread scoping and return checkpoints from other tenants. Attack surface The vulnerable path was in MongoDBSaver.getTuple(), where threadid, checkpointns, and checkpointid were used in MongoDB find() queries. The same unvalidated values were then reused to fetch pending writes. Applications were exposed when untrusted input was forwarded into config.configurable (for example, directly from request bodies or query parameters) without string coercion or schema validation. Who is affected? Applications are vulnerable if they: - Use @langchain/langgraph-checkpoint-mongodb with multi-tenant or…
Recommended action: Upgrade to 1.3.1 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.