THREAT OPS › Threat News › [GHSA] GHSA-47pj-3jcm-6whg (medium) — LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
[GHSA] GHSA-47pj-3jcm-6whg (medium) — LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
GHSA-47pj-3jcm-6whg Severity: medium CVE: CVE-2026-71433
LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores
## Summary
The Postgres and SQLite stores persist hierarchical namespaces as a dot-joined string (`("memories", "alice")` becomes `memories.alice`) and scoped reads by matching that string with `LIKE '<path>%'`. Because `LIKE` has no notion of th
Indicators of compromise
- CVE-2026-71433cve
Original source: https://github.com/advisories/GHSA-47pj-3jcm-6whg