Multiple vulnerabilities have been identified in LangGraph components, including the Python SDK, the JavaScript/TypeScript API, and the command-line tool. The issues affect langgraph-sdk, langgraph, langgraph-api, and langgraph-cli. They can expose authenticated request handling, enable cross-user data access, and disclose sensitive credentials, creating risks for deployments that process untrusted identifiers or use custom authentication.
CVE-2026-118667 (CVSS 4.3 — Medium): The LangGraph Python SDK streaming client can construct request paths from unencoded caller-supplied thread and assistant identifiers during streaming tree and state retrieval. A low-privileged attacker who can supply those identifiers may redirect an authenticated GET request to another readable path on the same server, causing the application to receive an unintended response.[/subscribe_to_unlock_form]
Multiple vulnerabilities have been identified in LangGraph components, including the Python SDK, the JavaScript/TypeScript API, and the command-line tool. The issues affect langgraph-sdk, langgraph, langgraph-api, and langgraph-cli. They can expose authenticated request handling, enable cross-user data access, and disclose sensitive credentials, creating risks for deployments that process untrusted identifiers or use custom authentication.
CVE-2026-118667 (CVSS 4.3 — Medium): The LangGraph Python SDK streaming client can construct request paths from unencoded caller-supplied thread and assistant identifiers during streaming tree and state retrieval. A low-privileged attacker who can supply those identifiers may redirect an authenticated GET request to another readable path on the same server, causing the application to receive an unintended response.[emaillocker id="1283"]
CVE-2026-118668 (CVSS 8.6 — High): The LangGraph API may fail to apply Store authorization changes returned by JavaScript or TypeScript custom authentication handlers. An authenticated ordinary user may read, overwrite, search, or delete Store data outside their authorized namespace when the handler relies on namespace rewriting.
CVE-2026-115885 (CVSS 4.1 — Medium): The LangGraph CLI exposes temporary registry push tokens when executing langgraph deploy --verbose, allowing individuals with access to terminal or CI logs to use the tokens to pull or push deployment images before expiration.
The following reports contain further technical details:
[/emaillocker]