Langchain-ai Langgraph vulnerabilities

• langchain-ai langgraph-api LangGraph JavaScript custom authentication may permit cross-user Store access CVE-2026-118668 Fix available 8.6 HighOctober 28, 2026
• langchain-ai langgraph, langgraph-sdk +1 more LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests CVE-2026-118667 Fix available 4.3 MediumOctober 28, 2026
• langchain-ai langgraph LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output CVE-2026-115885 Fix available 4.1 MediumOctober 23, 2026
• langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 more LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores CVE-2026-115883 Fix available 6.0 MediumOctober 23, 2026
• langchain-ai langgraph LangGraph SDK custom auth silently ignores actions= on resource decorators CVE-2026-104873 Fix available 7.6 HighOctober 2, 2026
• langchain-ai langgraph-checkpoint-mongodb, langgraph-store-mongodb, langchain-mongodb +2 more LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure CVE-2026-55253 Fix available 7.7 HighAugust 20, 2026
• langchain-ai langgraph-api langgraph-api: Incomplete assistant authorization in LangGraph Server run creation CVE-2026-55236 Fix available 5.9 MediumAugust 19, 2026
• langchain-ai langgraph-api langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication CVE-2026-55235 Fix available 5.9 MediumAugust 19, 2026
• langchain-ai langgraph, langgraph-checkpoint-postgres, langgraph-checkpoint-sqlite +2 more LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores CVE-2026-71433 Fix available 5.3 MediumAugust 6, 2026
• langchain-ai langgraph langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash CVE-2026-14742 2.3 LowJuly 5, 2026
• langchain-ai langgraph, langchain langgraph-checkpoint, langchain-ai langraph-checkpoint +2 more LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading CVE-2026-48775 Fix available 6.8 MediumJune 16, 2026
• langchain-ai langgraphjs @langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access CVE-2026-48121 Public exploitFix available 6.7 MediumJune 12, 2026
• langchain langgraph LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading CVE-2026-28277 Fix available 6.8 MediumMarch 5, 2026
• langchain-ai langgraph-checkpoint LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution CVE-2026-27794 Fix available 6.6 MediumFebruary 25, 2026
• langchain-ai langgraphjs RediSearch Query Injection in @langchain/langgraph-checkpoint-redis CVE-2026-27022 Fix available 6.5 MediumFebruary 18, 2026
• langchain-ai langgraph, langchain langgraph-checkpoint-sqlite +1 more LangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list method CVE-2025-67644 Public exploitFix available 7.3 HighDecember 10, 2025
• langchain-ai langgraph LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer CVE-2025-64439 Fix available 7.4 HighNovember 5, 2025
• langchain-ai langgraph LangGraph SQLite Checkpoint Filter Key SQL Injection POC for SqliteStore CVE-2025-64104 Fix available 7.3 HighOctober 29, 2025