LangGraph’s SQLite checkpointer flaw lets attackers jump from SQL injection to full RCE
Check Point Research uncovered three chained flaws in LangGraph's SQLite checkpointer, starting with CVE‑2025‑67644, an SQL injection via a metadata filter. The injection lets an attacker inject malicious SQL that leads to arbitrary deserialization and full remote code execution, jeopardizing any system using LangGraph's persistence layer.