CVE-2026-48121 Details
Description
@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint_id) from config.configurable are passed into MongoDB find() queries in MongoDBSaver.getTuple() without type enforcement. If an attacker supplies an object payload (such as MongoDB operators $gt or $ne) instead of a string, it can be interpreted as a query operator, bypassing thread scoping and leaking checkpoints, including pending writes, across tenants. Applications are at risk if they forward untrusted input into config.configurable without coercing it to strings or validating it against a schema, particularly in multi-tenant or user-isolated setups. Apps that only use server-issued, string-typed identifiers with schema validation rejecting non-string fields are not affected. This issue has been fixed in version 1.3.1.
A NoSQL injection vulnerability has been identified in the '@langchain/langgraph-checkpoint-mongodb' package, specifically in versions through 1.3.0. The issue arises within the 'MongoDBSaver' class, where checkpoint identifier fields are used in MongoDB queries without proper type validation. This lack of enforcement allows attackers to inject MongoDB operator objects, bypassing intended thread scoping and accessing checkpoints from other tenants. The vulnerability is exploitable when untrusted input is forwarded into the 'config.configurable' property, particularly in multi-tenant or user-isolated environments. Applications that only use server-issued, string-typed identifiers with schema validation are not affected.
Upgrade to '@langchain/langgraph-checkpoint-mongodb' version 1.3.1 or later. This update includes runtime validation for configurable checkpoint identifiers, rejecting invalid values before any MongoDB query or write operations. Applications that currently pass non-string identifier values in 'config.configurable' will need to normalize or validate these inputs, as the new version will return explicit errors for invalid values.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Aug 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-943 | Improper Neutralization of Special Elements in Data Query Logic | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | CVE Modified | CISA-ADP |
| Aug 4, 2026 | New CVE Received | [email protected] |