CVE-2026-27794
2 advisories.
PyPI/langgraph-checkpoint CVE-2026-27794: medium 6.6
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
Action: Upgrade langgraph-checkpoint to 4.0.0 or later.
pip install langgraph-checkpoint==4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: GHSA-mhr3-j7m5-c7c9
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-mhr3-j7m5-c7c9
- https://nvd.nist.gov/vuln/detail/CVE-2026-27794
- https://github.com/langchain-ai/langgraph/pull/6677
- https://github.com/langchain-ai/langgraph/commit/f91d79d0c86932ded6e3b9f195d5a0bbd5aef99c
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/releases/tag/checkpoint%3D%3D4.0.0
CVE-2026-27794 · published · modified · JSON
PyPI/langgraph-checkpoint CVE-2026-27794: medium 6.6
LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
Action: Upgrade langgraph-checkpoint to 4.0.0 or later.
pip install langgraph-checkpoint==4.0.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.0 | - |
Fixed versions
| 4.0.0 |
Sources
- osv: PYSEC-2026-2574
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-mhr3-j7m5-c7c9
- https://nvd.nist.gov/vuln/detail/CVE-2026-27794
- https://github.com/langchain-ai/langgraph/pull/6677
- https://github.com/langchain-ai/langgraph/commit/f91d79d0c86932ded6e3b9f195d5a0bbd5aef99c
- https://github.com/langchain-ai/langgraph
- https://github.com/langchain-ai/langgraph/releases/tag/checkpoint%3D%3D4.0.0
- https://pypi.org/project/langgraph-checkpoint
- https://github.com/advisories/GHSA-mhr3-j7m5-c7c9
CVE-2026-27794 · published · modified · JSON