CVE-2026-48121

@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from config.configurable are passed into MongoDB find() queries in MongoDBSaver.getTuple() without type enforcement. If an attacker supplies an object payload (such as MongoDB operators $gt or $ne) instead of a string, it can be interpreted as a query operator, bypassing thread scoping and leaking checkpoints, including pending writes, across tenants. Applications are at risk if they forward untrusted input into config.configurable without coercing it to strings or validating it against a schema, particularly in multi-tenant or user-isolated setups. Apps that only use server-issued, string-typed identifiers with schema validation rejecting non-string fields are not affected. This issue has been fixed in version 1.3.1.

• CWE-943

• https://github.com/langchain-ai/langgraphjs/commit/284226c7ca164b3c81fe2d9e32b10f1fc6b99a3c
• https://github.com/langchain-ai/langgraphjs/issues/2351
• https://github.com/langchain-ai/langgraphjs/security/advisories/GHSA-98xf-r82g-9mhx

Published

Aug 4, 2026

Last Modified

Aug 4, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-48115Misskey is an open source, federated social media platform. …6.3
• CVE-2026-48116AnythingLLM is an application that turns pieces of content i…8.8
• CVE-2026-48117DroneAware is a drone detection platform. The centralized Dr…6.8
• CVE-2026-48119Nezha Monitoring is a self-hostable, lightweight, servers an…7.1
• CVE-2026-4812The Advanced Custom Fields (ACF) plugin for WordPress is vul…5.3
• CVE-2026-48120Kakoune is a code editor. Prior to version 2026.05.21, the b…8.6
• CVE-2026-48122Ruby LSP is an implementation of the language server protoco…5.4
• CVE-2026-48124Cursor is a code editor built for programming with AI. In ve…8.5
• CVE-2026-48125UAParser.js is a JavaScript library to detect browsers, oper…5.3
• CVE-2026-48126Algernon is a small self-contained pure-Go web server. Prior…8.2
• CVE-2026-48127Frappe is a full-stack web application framework. Prior to 1…5.3
• CVE-2026-48128Budibase is an open-source low-code platform. Prior to 3.39.…5.1