CVE-2026-55253
LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph. Prior to langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0, MongoDBSaver.list(), MongoDBSaver.alist(), and MongoDBStore.search() incorporate filter dictionaries into MongoDB queries without recursively rejecting keys prefixed with $. An authenticated caller who controls a filter argument through HTTP query parameters, request body fields, or agent tool arguments can inject MongoDB Query Language operators such as $regex or $where. In a multi-tenant deployment that uses the filter to enforce per-user or per-tenant isolation, injected operators can bypass intended equality filtering and expose other tenants' checkpoint or store data. Filters constructed entirely from trusted server-side values have lower practical risk. This issue is fixed in langgraph-checkpoint-mongodb 0.3.0 and langgraph-store-mongodb 0.4.0.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.7
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- EPSS probability
- 0.39%
- CWE
- CWE-943
- Published
- 2026-09-14
- Last modified
- 2026-09-14
Affected products
- langchain-ai langchain-mongodb
- langchain-ai langgraph-checkpoint-mongodb
- langchain-ai langgraph-store-mongodb
Weakness type
Related vulnerabilities
- CVE-2022-36084 — cruddl vulnerable to AQL injection through flexSearch
- CVE-2024-4872 — A vulnerability exists in the query validation of the MicroSCADA Pro/X SYS600 product. If exploited this could allow an
- CVE-2020-36195 — SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
- CVE-2026-32248 — Parse Server: Account takeover via operator injection in authentication data identifier
- CVE-2026-30941 — Parse Server has a NoSQL injection via token type in password reset and email verification endpoints
- CVE-2026-25514 — FacturaScripts has SQL Injection vulnerability in Autocomplete Actions
- CVE-2025-24787 — Parameter injection in DB connection URIs leading to local file inclusion in WhoDB
- CVE-2026-54350 — Budibase: Anonymous NoSQL operator injection via published-app query templates