Skip to content
OpenAdvisories

Package · PyPI

aegra-api

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.6
    CVE-2026-44504

    Aegra: Cross-user run injection in /threads/{thread_id}/runs (IDOR)

    Aegra is a drop-in replacement for LangSmith Deployments. Prior to 0.9.7, with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated attacker, given another user's thread_id, can execute graph runs against …

    aegra aegra aegra-api PyPI