Critical Vulnerability Chain in LangGraph Allows Attackers to Gain Full Server Control

Cybersecuritynews •Abinaya • June 12, 2026

A critical vulnerability chain discovered in LangGraph, a popular open-source AI agent framework developed by the creators of LangChain, could allow attackers to gain full server control through remote code execution (RCE). The issue, identified by Check Point Research, highlights how traditional vulnerabilities can become significantly more dangerous when embedded in AI-driven systems that manage […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in LangGraph AI Framework Enable Full Server Control Check Point Research identified critical vulnerabilities in LangGraph, an AI framework with 46.5 million downloads last month. The flaws allow attackers to execute remote code and gain control over affected servers. The vulnerabilities stem from an SQL injection in the get_state_history() function combined with a deserialization issue. These issues can lead to unauthorized access to sensitive data, including API keys and conversation histories. LangGraph is widely used for automating tasks in corporate environments, making the impact potentially severe. The vulnerabilities have been assigned three CVEs, and the LangChain team is working on fixes. Organizations using LangGraph are advised to monitor their systems closely and apply patches once available. 7 sources 73

Extracted Entities

Critical Vulnerability Chain in LangGraph Allows Attackers to Gain Full Server Control

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)