CVE Explorer
CVE-2025-8709
A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators ($eq, $ne, $gt, $lt, $gte, $lte) where direct string concatenation is used without proper parameterization. This allows attackers to inject arbitrary SQL, leading to unauthorized access to all documents, data exfiltration of sensiti
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
0
Affected products and versions
1 source assertion{"product":"langchain-ai/langchain","vendor":"langchain-ai","versions":[{"lessThanOrEqual":"latest","status":"affected","version":"unspecified","versionType":"custom"}]}
- cve_program_cvelist_v5affectedurn:baitaphish:normalized-source-record:v2:f6d3207963b36053b421b897b8d627cd24d99e7cc198d602622a2f84fe5ef45d · sha256:ba0e48445927f876… · /containers/cna/affected/0
Provider-owned CVSS observations
1 source assertion{"metric":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":7.3,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N","version":"3.0"},"metric_type":"cvssV3_0"}
- cve_program_cvelist_v5cvssurn:baitaphish:normalized-source-record:v2:f6d3207963b36053b421b897b8d627cd24d99e7cc198d602622a2f84fe5ef45d · sha256:ba0e48445927f876… · /containers/cna/metrics/0/cvssV3_0
CWE assertions
1 source assertion{"cweId":"CWE-89","description":"CWE-89 Improper Neutralization of Special Elements used in an SQL Command","lang":"en","type":"CWE"}
- cve_program_cvelist_v5cweurn:baitaphish:normalized-source-record:v2:f6d3207963b36053b421b897b8d627cd24d99e7cc198d602622a2f84fe5ef45d · sha256:ba0e48445927f876… · /containers/cna/problemTypes/0/descriptions/0
Source references
2 source assertions{"tags":["exploit"],"url":"https://huntr.com/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f6d3207963b36053b421b897b8d627cd24d99e7cc198d602622a2f84fe5ef45d · sha256:ba0e48445927f876… · /containers/adp/0/references/0
{"url":"https://huntr.com/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118"}
- cve_program_cvelist_v5referenceurn:baitaphish:normalized-source-record:v2:f6d3207963b36053b421b897b8d627cd24d99e7cc198d602622a2f84fe5ef45d · sha256:ba0e48445927f876… · /containers/cna/references/0
Attribution and limitations
- CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →
Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.