Exploit for CVE-2025-67644

## https://sploitus.com/exploit?id=7623FAFE-5557-5114-A7C3-A539D2189038
# CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection

![Author](https://img.shields.io/badge/Author-Mohammed%20Idrees%20Banyamer-red)
![Role](https://img.shields.io/badge/Role-Security%20Researcher-blue)
![Country](https://img.shields.io/badge/Country-Jordan-black)
![Platform](https://img.shields.io/badge/Platform-Python-orange)
![Vulnerability](https://img.shields.io/badge/Vuln-SQL%20Injection-critical)
![CVE](https://img.shields.io/badge/CVE-2025--67644-orange)
![Status](https://img.shields.io/badge/Exploit-PoC-success)
![License](https://img.shields.io/badge/License-MIT-green)

**CVE-2025-67644** is a **SQL Injection** vulnerability (CWE-89) in the `langgraph-checkpoint-sqlite` package (part of LangGraph / LangChain ecosystem).  
It allows an attacker to inject arbitrary SQL via unsanitized **metadata filter keys** passed to the `list()` / `alist()` methods of `SqliteSaver`.

**Impact**: Full bypass of filters, leakage of all checkpoint records (including potentially sensitive conversation state, thread IDs, metadata), and in some deployment scenarios — broader database access.

**Affected versions**: |"Sends malicious filter dict"| B["Application using langgraph-checkpoint-sqlite"]
    B -->|"Passes filter=..."| C["SqliteSaver.list method"]
    C -->|"Unsafe key interpolation"| D["Metadata predicate logic"]
    D -->|"Builds injectable SQL"| E["SQLite Engine"]
    E -->|"Returns ALL checkpoints / sensitive data"| F[Attacker]
    F -->|"Data exfiltration / authorization bypass"| G["Impact achieved"]
```

*(This version avoids parentheses in node text where possible and uses quotes around labels with special characters/dots to prevent parse errors.)*

## Features of this PoC

- Clean synchronous exploit demonstration
- Automatically creates demo data if the database is empty
- CLI options: `--dump-all` (show full records), `--threads-only` (extract thread_ids only)
- Nice ASCII banner + clear output formatting

## Requirements

```bash
pip install langgraph-checkpoint-sqlite"<3.0.1"   # e.g. ==2.0.0
```

## Usage

```bash
# Basic check (count only)
python3 exploit.py checkpoints.db

# Dump full checkpoint details
python3 exploit.py checkpoints.db --dump-all

# Extract thread_ids only (useful for enumeration)
python3 exploit.py checkpoints.db --threads-only --dump-all

# Test against in-memory database (quick & volatile)
python3 exploit.py ":memory:" --dump-all
```

## Installation & Quick Start

1. Install vulnerable version:
   ```bash
   pip install langgraph-checkpoint-sqlite==2.0.0
   ```

2. Save the exploit code as `exploit.py`

3. Run against an existing or new checkpoint database:
   ```bash
   python3 exploit.py checkpoints.db --dump-all
   ```

## Remediation / Mitigation

- **Upgrade immediately**:
  ```bash
  pip install --upgrade langgraph-checkpoint-sqlite
  ```
  (version ≥ 3.0.1)

- Do **not** accept arbitrary metadata filter keys from untrusted sources (users, APIs, JSON payloads, etc.)
- In ≥ 3.0.1 the library enforces a strict regex on keys: `^[a-zA-Z0-9_.-]+$`

## Legal Notice

This is a **proof-of-concept** released for **educational and security research purposes only**.  
Do **not** use this code against production systems or any target without explicit written permission.  
The author is not responsible for misuse or damage caused by this code.

## References

- [GitHub Security Advisory GHSA-9rwj-6rc7-p77c](https://github.com/langchain-ai/langgraph/security/advisories/GHSA-9rwj-6rc7-p77c)
- [Fix Commit](https://github.com/langchain-ai/langgraph/commit/297242913f8ad2143ee3e2f72e67db0911d48e2a)
- [NVD Entry – CVE-2025-67644](https://nvd.nist.gov/vuln/detail/CVE-2025-67644)

---

**Responsible disclosure & research only.**  
Mohammed Idrees Banyamer  
[@banyamer_security](https://instagram.com/banyamer_security)