{"id":"ghsa-ghsa-6hmw-9432-67qq","seq":661295,"kind":"advisory","title":"LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores","url":"https://github.com/advisories/GHSA-6hmw-9432-67qq","permalink":"https://vulnpulse.app/items/ghsa-ghsa-6hmw-9432-67qq","summary":"影響: pip:langgraph-checkpoint-postgres < 3.1.3 → 3.1.3, pip:langgraph-checkpoint-sqlite < 3.1.2 → 3.1.2\nThe Postgres and SQLite stores save a namespace as its labels joined with ., so (\"tenant\", \"bob\") and (\"tenant.bob\",) map to the same stored namespace. put rejected labels containing ., but get, search, delete, list_namespaces, their async versions, and ops passed directly to batch/abatch did not. A caller that could pass such a label could read, overwrite or delete items in another namespace. Details BaseStore checked namespace labels only in put/aput. The other methods passed the namespace on…","severity":"medium","techs":["python","postgresql","sqlite"],"cves":["CVE-2026-115883"],"tags":["GHSA-6hmw-9432-67qq","langgraph-checkpoint-postgres","langgraph-checkpoint-sqlite"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-23T22:06:44.000Z","fetched_at":"2026-10-24T04:50:51.468Z"}