CVE-2025-8709

{
  "id": "CVE-2025-8709",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-26T06:15:48.680",
  "lastModified": "2026-10-19T16:10:00.260",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators ($eq, $ne, $gt, $lt, $gte, $lte) where direct string concatenation is used without proper parameterization. This allows attackers to inject arbitrary SQL, leading to unauthorized access to all documents, data exfiltration of sensitive fields such as passwords and API keys, and a complete bypass of application-level security filters."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de inyección SQL existe en el repositorio langchain-ai/langchain, específicamente en la implementación del almacén SQLite de LangGraph. La versión afectada es langgraph-checkpoint-sqlite 2.0.10. La vulnerabilidad surge del manejo inadecuado de los operadores de filtro ($eq, $ne, $gt, $lt, $gte, $lte) donde se utiliza la concatenación directa de cadenas sin una parametrización adecuada. Esto permite a los atacantes inyectar SQL arbitrario, lo que lleva a un acceso no autorizado a todos los documentos, exfiltración de datos de campos sensibles como contraseñas y claves API, y una elusión completa de los filtros de seguridad a nivel de aplicación."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "langchain-ai",
          "product": "langchain-ai/langchain",
          "versions": [
            {
              "version": "unspecified",
              "lessThanOrEqual": "latest",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV30": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.0,
        "impactScore": 4.7
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-28T14:32:35.114025Z",
          "id": "CVE-2025-8709",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://huntr.com/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118",
      "source": "[email protected]"
    },
    {
      "url": "https://huntr.com/bounties/9793f4b3-76f8-44a4-989f-49a2177ee118",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}