{
 "id": "AIR-2025-0495",
 "slug": "cve-2025-8709-sql-injection-vulnerability-in-langgraph-sqlit",
 "title": "CVE-2025-8709: SQL injection vulnerability in LangGraph SQLite store",
 "summary": "An improper handling of filter operators in LangGraph leads to SQL injection via string concatenation. This allows attackers to access unauthorized documents and exfiltrate sensitive fields like passwords and API keys.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "langchain",
  "langgraph"
 ],
 "incident_date": "2025-10-26",
 "incident_date_precision": "day",
 "first_reported": "2025-10-26",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-8709",
   "publisher": "NVD",
   "title": "CVE-2025-8709: A SQL injection vulnerability exists in the langchain-ai/langchain repository, specifically in the LangGraph's SQLite store…",
   "published_at": "2025-10-26"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2025-8709",
  "sql-injection",
  "langchain"
 ],
 "created_at": "2026-10-18T10:04:21.885Z",
 "updated_at": "2026-10-18T10:04:21.885Z"
}