Skip to content
Heist/ feed
Back to feed
Medium

RediSearch Query Injection in @langchain/langgraph-checkpoint-redis

Type: advisorySources: OSV

@langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection vulnerability exists in the @langchain/langgraph-checkpoint-redis package's filter handling. The RedisSaver and ShallowRedisSaver classes construct RediSearch queries by directly interpolating user-provided filter keys and values without proper escaping. RediSearch has special syntax characters that can modify query behavior, and when user-controlled data contains these characters, the query logic can be manipulated to bypass intended access controls. This vulnerability is fixed in 1.0.2.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2026-27022
Confirmed fixed CVEs
Not specified
Updated in this feed
2 Nov 2026, 21:06 UTC · Revision 1

Source evidence

RediSearch Query Injection in @langchain/langgraph-checkpoint-redis

core-osv · Original source

Published 20 Feb 2026, 21:06 UTC

@langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection vulnerability exists in the @langchain/langgraph-checkpoint-redis package's filter handling. The RedisSaver and ShallowRedisSaver classes construct RediSearch queries by directly interpolating user-provided filter keys and values without proper escaping. RediSearch has special syntax characters that can modify query behavior, and when user-controlled data contains these characters, the query logic can be manipulated to bypass intended access controls. This vulnerability is fixed in 1.0.2.

osv:CVE-2026-27022
Complete source record
{
  "id": "772e17b9e8a94022414ff96c5764209b124dad793fd9f483decbddb6ae819c9b",
  "url": "https://osv.dev/vulnerability/CVE-2026-27022",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "RediSearch Query Injection in @langchain/langgraph-checkpoint-redis",
    "summary": "@langchain/langgraph-checkpoint-redis is the Redis checkpoint and store implementation for LangGraph. A query injection vulnerability exists in the @langchain/langgraph-checkpoint-redis package's filter handling. The RedisSaver and ShallowRedisSaver classes construct RediSearch queries by directly interpolating user-provided filter keys and values without proper escaping. RediSearch has special syntax characters that can modify query behavior, and when user-controlled data contains these characters, the query logic can be manipulated to bypass intended access controls. This vulnerability is fixed in 1.0.2.",
    "evidence": "osv:CVE-2026-27022",
    "products": [],
    "severity": "medium",
    "structured": {
      "id": "CVE-2026-27022",
      "aliases": [
        "CVE-2026-27022",
        "GHSA-5mx2-w598-339m"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/langchain-ai/langgraphjs",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "f5b22a6f195ab3632ae8ff6cef32bb5b323ed106"
                },
                {
                  "fixed": "814c76dc3938d0f6f7e17ca3bc11d6a12270b2a1"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "1.0.2"
                      }
                    ],
                    "source": "AFFECTED_FIELD",
                    "strategy": "StringRangeExpression"
                  },
                  {
                    "range": [
                      {
                        "fixed": "814c76dc3938d0f6f7e17ca3bc11d6a12270b2a1"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "@langchain/langgraph@1.1.3",
            "@langchain/langgraph-checkpoint-sqlite@1.0.1",
            "@langchain/langgraph@1.1.2",
            "@langchain/langgraph@1.1.1",
            "@langchain/langgraph-sdk@1.5.5",
            "@langchain/langgraph@1.1.0",
            "@langchain/langgraph-sdk@1.5.4",
            "@langchain/langgraph-sdk@1.5.3",
            "@langchain/langgraph-checkpoint-validation@1.0.9",
            "@langchain/langgraph-sdk@1.5.2",
            "@langchain/langgraph-sdk@1.5.1",
            "@langchain/langgraph@1.0.15",
            "@langchain/langgraph-ui@1.1.11",
            "@langchain/langgraph-sdk@1.5.0",
            "@langchain/langgraph-cli@1.1.11",
            "@langchain/langgraph-api@1.1.11",
            "create-langgraph@1.1.5",
            "@langchain/langgraph@1.0.14",
            "@langchain/langgraph-ui@1.1.10",
            "@langchain/langgraph-sdk@1.4.6",
            "@langchain/langgraph-cli@1.1.10",
            "@langchain/langgraph-checkpoint-validation@1.0.8",
            "@langchain/langgraph-checkpoint-mongodb@1.1.6",
            "@langchain/langgraph-api@1.1.10",
            "create-langgraph@1.1.4",
            "@langchain/langgraph@1.0.13",
            "@langchain/langgraph-ui@1.1.9",
            "@langchain/langgraph-sdk@1.4.5",
            "@langchain/langgraph-cli@1.1.9",
            "@langchain/langgraph-checkpoint-validation@1.0.7",
            "@langchain/langgraph-checkpoint-mongodb@1.1.5",
            "@langchain/langgraph-api@1.1.9",
            "create-langgraph@1.1.3",
            "@langchain/langgraph@1.0.12",
            "@langchain/langgraph-ui@1.1.8",
            "@langchain/langgraph-sdk@1.4.4",
            "@langchain/langgraph-cli@1.1.8",
            "@langchain/langgraph-checkpoint-validation@1.0.6",
            "@langchain/langgraph-checkpoint-mongodb@1.1.4",
            "@langchain/langgraph-api@1.1.8",
            "@langchain/langgraph-ui@0.0.43",
            "@langchain/langgraph-cli@0.0.43",
            "@langchain/langgraph-api@0.0.43",
            "@langchain/langgraph-ui@0.0.42",
            "@langchain/langgraph-cli@0.0.42",
            "@langchain/langgraph-api@0.0.42",
            "@langchain/langgraph-sdk@0.0.90",
            "0.3.6",
            "0.3.1",
            "0.3.0",
            "checkpoint==0.0.18",
            "swarm==0.0.4",
            "supervisor==0.0.13",
            "cua==0.0.6",
            "0.2.74",
            "0.2.73",
            "0.2.68",
            "0.2.65",
            "0.2.64",
            "supervisor==0.0.11",
            "supervisor==0.0.10",
            "0.2.63",
            "swarm==0.0.3",
            "supervisor==0.0.9",
            "0.2.53",
            "0.2.52",
            "swarm==0.0.1",
            "supervisor==0.0.6",
            "supervisor==0.0.5",
            "0.2.44",
            "0.2.37",
            "0.2.31",
            "0.2.30",
            "0.2.26",
            "0.2.24",
            "0.2.22",
            "0.2.21",
            "0.2.18",
            "0.2.17",
            "0.2.15",
            "0.2.12",
            "0.2.11",
            "0.2.10",
            "0.2.9",
            "0.2.8",
            "0.2.7",
            "0.2.6",
            "0.2.4",
            "0.2.3",
            "0.1.5",
            "0.1.1",
            "0.1.0",
            "0.0.29",
            "0.0.28",
            "0.0.22",
            "0.0.8",
            "0.0.7",
            "0.0.6",
            "0.0.5",
            "0.0.4"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27022.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:23.408675458Z",
      "provider": "osv",
      "references": [
        "https://github.com/langchain-ai/langgraphjs/releases/tag/@langchain/langgraph-checkpoint-redis@1.0.2",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27022.json",
        "https://github.com/langchain-ai/langgraphjs/security/advisories/GHSA-5mx2-w598-339m",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-27022",
        "https://github.com/langchain-ai/langgraphjs/commit/814c76dc3938d0f6f7e17ca3bc11d6a12270b2a1",
        "https://github.com/langchain-ai/langgraphjs/pull/1943"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-74"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27022.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-27022",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 490066,
  "published_at": "2026-02-20T21:06:53.773+00:00"
}