SqliteSaver
A SQLite-based checkpoint saver built into LangGraph for persisting agent state. It supports state retention across sessions and time-travel-style debugging.
Timeline (last 90 days)
LangChain's create_agent + SqliteSaver default configuration amplifies untrusted input on disk by 10.4x
Disk usage grows quadratically (O(n²)) because the checkpointer writes the entire conversation state at every superstep
In an experiment with 6 sessions, 5 messages per session, and 600 KB per message (18.4 MB of input in total), 192.4 MB was written to disk
None of the five effective mitigations the researcher lists (limiting request body size, trimming the message list, PRAGMA max_page_count, offline VACUUM, monitoring growth) are present in the default documentation examples
All Facts (4)
LangChain's create_agent + SqliteSaver default configuration amplifies untrusted input on disk by 10.4x
50%UnverifiedDisk usage grows quadratically (O(n²)) because the checkpointer writes the entire conversation state at every superstep
50%UnverifiedIn an experiment with 6 sessions, 5 messages per session, and 600 KB per message (18.4 MB of input in total), 192.4 MB was written to disk
50%UnverifiedNone of the five effective mitigations the researcher lists (limiting request body size, trimming the message list, PRAGMA max_page_count, offline VACUUM, monitoring growth) are present in the default documentation examples
50%