THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-47pj-3jcm-6whg (medium) — LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

[GHSA] GHSA-47pj-3jcm-6whg (medium) — LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

medgithub_advisoriesPublished 2026-08-06

GHSA-47pj-3jcm-6whg Severity: medium CVE: CVE-2026-71433

LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

## Summary

The Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string (`("memories", "alice")` becomes `memories.alice`) and scoped reads by matching that string with `LIKE '<path>%'`. Because `LIKE` has no notion of th

Indicators of compromise

Original source: https://github.com/advisories/GHSA-47pj-3jcm-6whg