Skip to content
OpenAdvisories

Package · PyPI

langgraph-sdk

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 4.3
    CVE-2026-118667

    LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an af…

    langchain-ai langgraph langgraph-sdk langgraph PyPI
  • High 7.6
    CVE-2026-104873

    LangGraph SDK custom auth silently ignores actions= on resource decorators

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assis…

    langchain-ai langgraph langgraph-sdk PyPI
  • Medium 4.2
    CVE-2026-48776

    LangGraph SDK has unsafe URL path construction

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values us…

    langchain-ai langchain-sdk langchain-ai langgraph-sdk PyPI