CVE-2026-55253 | langchain-ai langchain-mongodb filter code injection

A vulnerability was found in langchain-ai langchain-mongodb, langgraph-checkpoint-mongodb and langgraph-store-mongodb. It has been rated as problematic. This issue affects the function MongoDBSaver.list/MongoDBSaver.alist/MongoDBStore.search. This manipulation of the argument filter causes code injection.

This vulnerability is tracked as CVE-2026-55253. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More