AIKIDO-2026-841773
langgraph-checkpoint-postgres is vulnerable to Incorrect Authorization
53
Medium Risk
This Affects:
langgraph-checkpoint-postgresTL;DR
The Postgres store persists hierarchical namespaces as a dot-joined string and performs scoped reads by matching that string with a SQL LIKE prefix pattern. Because LIKE does not respect the . segment separator and label metacharacters such as _ and % are interpolated into the pattern unescaped, a scoped search or list_namespaces call also returns items stored under sibling namespaces whose flattened form shares leading characters. When an application uses the namespace as a tenant or user boundary, an ordinary scoped read can disclose stored items belonging to another tenant with no crafted input. The fix scopes prefix matching to exact segment boundaries, escapes metacharacters in labels, and uses segment-aware matching for prefix and suffix conditions.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and you use PostgresStore/AsyncPostgresStore as a tenant or user boundary with namespace labels where one label can be a prefix of another or contains _ or %.
Background info
langgraph-checkpoint-postgres is vulnerable to Incorrect Authorization in versions 0.0.1 - 3.1.0.
How to fix this
Upgrade the langgraph-checkpoint-postgres and/or the langgraph-checkpoint-sqlite library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant