Skip to content
OpenAdvisories

Package · PyPI

langgraph-api

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.6
    CVE-2026-118668

    LangGraph JavaScript custom authentication may permit cross-user Store access

    langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten namespace that is not carried across the runtime boundary…

    langchain-ai langgraph-api langgraph-api PyPI
  • Medium 5.9
    CVE-2026-55235

    langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

    langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, langgraph-api permits a run or cron to specify a relative webhook target that is delivered through an in-process loopback transport, and the authentication middlewa…

    langchain-ai langgraph-api langgraph-api PyPI
  • Medium 5.9
    CVE-2026-55236

    langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

    langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value instead of the assistants.r…

    langchain-ai langgraph-api langgraph-api PyPI