
- LangChain and LangGraph patch three high-severity flaws exposing files, secrets, and conversation histories
- Vulnerabilities included path traversal, deserialization leaks, and SQL injection in SQLite checkpoints
- Researchers warn risks ripple through downstream libraries; developers urged to audit configs and treat LLM outputs as untrusted input