Check Point Discloses Three-CVE RCE Chain in LangGraph Affecting 46M+ Monthly Downloads; SQL Injection to Unsafe Deserialization Kill Chain

Check Point Research disclosed a chained exploitation path across three patched LangGraph vulnerabilities: CVE-2025-67644 (SQLite checkpoint SQL injection, CVSS 7.3) feeds attacker-controlled serialized data into CVE-2026-28277 (msgpack unsafe deserialization, CVSS 6.8), yielding full RCE on self-hosted deployments — exposing LLM API keys, customer PII, CRM credentials, and conversation histories to attackers who can pivot into internal networks. A third flaw, CVE-2026-27022 (Redis query injection, CVSS 6.5), additionally bypasses access controls in Redis-backed deployments. With ~46.5 million monthly downloads across enterprise automation, customer support, and internal tooling, unpatched self-hosted LangGraph instances are high-value targets; operators must upgrade to langgraph ≥ 1.0.10, langgraph-checkpoint-sqlite ≥ 3.0.1, and langgraph-checkpoint-redis ≥ 1.0.2 immediately.

A third flaw, CVE-2026-27022 (Redis query injection, CVSS 6.5), additionally bypasses access controls in Redis-backed deployments.

This intelligence brief has been compiled from open-source reporting and corroborated across multiple threat intelligence sources. Defenders should treat the high severity rating as a guide to prioritization within their environment.

For the latest indicators of compromise, formatted SIEM queries, and unredacted actor intelligence related to this brief, DMZ Operator subscribers receive automated IOC packages via email the moment new advisories are published.