A medium-severity vulnerability, assigned CVE-2026-71433 with a CVSS score of 5.3, affects applications that use PostgresStore or SqliteStore and rely on namespace separation between users or tenants. The issue arises from namespace prefix matching crossing segment boundaries in Postgres and SQLite stores, allowing a read scoped to one namespace to return items belonging to another without any crafted input. This results in confidentiality disclosure of stored items outside the caller's intended scope, with no integrity or availability impact. Affected applications include those using PostgresStore/AsyncPostgresStore or SqliteStore/AsyncSqliteStore and having namespace labels where one is a prefix of another, such as '1' and '12', or labels containing '_' or '%'. Applications whose namespace labels are fixed-length identifiers like UUIDs, containing no '_' or '%', are not affected. The vulnerability was addressed by prefix scoping now matching the namespace exactly or requiring the '.' separator before any remainder, pattern metacharacters in labels being escaped, and list_namespaces using segment-aware matching for both prefix and suffix conditions. Affected versions include langgraph-checkpoint-postgres < 3.1.1 and langgraph-checkpoint-sqlite < 3.1.1.
The following reports contain further technical details:[/subscribe_to_unlock_form]
A medium-severity vulnerability, assigned CVE-2026-71433 with a CVSS score of 5.3, affects applications that use PostgresStore or SqliteStore and rely on namespace separation between users or tenants. The issue arises from namespace prefix matching crossing segment boundaries in Postgres and SQLite stores, allowing a read scoped to one namespace to return items belonging to another without any crafted input. This results in confidentiality disclosure of stored items outside the caller's intended scope, with no integrity or availability impact. Affected applications include those using PostgresStore/AsyncPostgresStore or SqliteStore/AsyncSqliteStore and having namespace labels where one is a prefix of another, such as '1' and '12', or labels containing '_' or '%'. Applications whose namespace labels are fixed-length identifiers like UUIDs, containing no '_' or '%', are not affected. The vulnerability was addressed by prefix scoping now matching the namespace exactly or requiring the '.' separator before any remainder, pattern metacharacters in labels being escaped, and list_namespaces using segment-aware matching for both prefix and suffix conditions. Affected versions include langgraph-checkpoint-postgres < 3.1.1 and langgraph-checkpoint-sqlite < 3.1.1.
The following reports contain further technical details:[emaillocker id="1283"]
[/emaillocker]