Vulnerabilities

TI-2026-82212 CVE-2026-118668 · GHSA-4hm6-w6qq-w73v

Cross-user Store access in LangGraph JavaScript custom authentication

LOW 39

langgraph-api implements the LangGraph API for rapid development and testing.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00369 Published 2026-10-28 Fixed in 0.15.0 CWE-639

TI-2026-82211 CVE-2026-118667 · GHSA-3fx2-cqw9-xr3c

Path traversal in LangGraph SDK v3 streaming helpers

LOW 20

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00394 Published 2026-10-28 Partial fix · 1.2.14, 0.4.6 CWE-22

TI-2026-79998 CVE-2026-115885 · GHSA-8prr-f582-jqq3

LangGraph CLI prints registry push token in verbose deploy output

LOW 18

The LangGraph CLI is the official command-line interface for LangGraph.

CVSS 4.0MEDIUM 4.1 Local Low privileges User interaction EPSS 0.00114 Published 2026-10-23 Fixed in 0.4.32 CWE-532

TI-2026-79997 CVE-2026-115883 · GHSA-6hmw-9432-67qq

Dotted namespace labels expose other namespaces in LangGraph stores

LOW 27

LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00298 Published 2026-10-23 Fixed in 1.2.15, 3.1.3 +1 CWE-20

TI-2026-68638 CVE-2026-106119 · GHSA-m6rx-h84q-8r95

LangChain MongoDB chat history allows cross-session data access

LOW 27

LangChain is a framework for building LLM-powered applications.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00463 Published 2026-10-06 Fixed in 1.5.14, 1.3.1 CWE-943

TI-2026-68452 CVE-2026-105799 · GHSA-5x6v-p487-7qh2

Query injection in LangChain @langchain/redis RediSearch filters

LOW 12

LangChain is a framework for building LLM-powered applications.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00278 Published 2026-10-06 Fixed in 1.1.1 CWE-943

TI-2026-66144 CVE-2026-104873 · GHSA-fvww-7h3r-vfhp

LangGraph SDK custom auth silently ignores actions= on resource decorators

LOW 33

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications.

CVSS 4.0HIGH 7.6 Network Low privileges No interaction EPSS 0.00253 Published 2026-10-02 Partial fix · 0.4.4 CWE-863

TI-2026-39926 CVE-2026-55253 · GHSA-533j-2v4q-mw5h

LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

LOW 34

LangChain MongoDB provides integrations between MongoDB, Atlas, LangChain, and LangGraph.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00531 Published 2026-09-14 Fixed in 0.4.0, 0.3.0 CWE-943

TI-2026-39912 CVE-2026-55235 · GHSA-2c9q-c2q9-qgqv

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

LOW 26

langgraph-api implements the LangGraph API for rapid development and testing.

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00365 Published 2026-09-14 Fixed in 0.10.0 CWE-287

TI-2026-39913 CVE-2026-55236 · GHSA-jfj5-wrj9-63x4

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

LOW 26

langgraph-api implements the LangGraph API for rapid development and testing.

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00255 Published 2026-09-14 Fixed in 0.10.0 CWE-285

TI-2026-51073 CVE-2026-72848 · GHSA-vg8m-4p2q-gcjh

Server-side request forgery in langchain-ai langchain-community

HIGH 73

SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_domain control only to leaf url entries.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00604 Published 2026-08-20 Partial fix CWE-918

TI-2026-50053 CVE-2026-71433 · GHSA-47pj-3jcm-6whg

LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

LOW 24

LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres and SQLite implementations of LangGraph's checkpoint saver.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00363 Published 2026-08-06 Fixed in 3.1.1 CWE-200

TI-2026-35560 CVE-2026-48121 · GHSA-98xf-r82g-9mhx

@langchain/langgraph-checkpoint-mongodb: NoSQL parameter injection in MongoDBSaver allows cross-tenant state access

LOW 32

@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation that uses MongoDB for storage.

CVSS 3.1MEDIUM 6.7 Adjacent network Low privileges User interaction EPSS 0.00355 Published 2026-08-04 Fixed in 1.3.1 CWE-943

TI-2026-42318 CVE-2026-59152

Arbitrary server-side file read in LangSmith SDK TracingMiddleware

LOW 22

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.

CVSS 3.1MEDIUM 5.0 Network Low privileges No interaction EPSS 0.00198 Published 2026-07-06 Partial fix · 0.8.18 CWE-22

TI-2026-12420 CVE-2026-14742 · GHSA-rff8-98wf-8rv4

langchain-ai langgraph Task Result Cache _cache.py _freeze weak hash

MEDIUM 45

A vulnerability was determined in langchain-ai langgraph up to 1.2.4.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00233 Published 2026-07-05 Fix deferred CWE-327

TI-2026-40010 CVE-2026-55443 · GHSA-gr75-jv2w-4656

LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders

LOW 24

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0021 Published 2026-06-22 Partial fix · 1.3.9, 1.4.6 CWE-22

TI-2026-36046 CVE-2026-48776 · GHSA-w39p-vh2g-g8g5

LangGraph SDK has unsafe URL path construction

LOW 39

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00216 Published 2026-06-16 Partial fix · 1.2.1, 0.3.15 CWE-22

TI-2026-36045 CVE-2026-48775 · GHSA-fjqc-hq36-qh5p

LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

LOW 32

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).

CVSS 3.1MEDIUM 6.8 Adjacent network High privileges No interaction EPSS 0.00232 Published 2026-06-16 Partial fix · 1.2.2, 4.1.1 CWE-502

TI-2026-32967 CVE-2026-45134 · GHSA-3644-q5cj-c5c7

LangSmith Client SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

LOW 31

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00199 Published 2026-05-27 Partial fix · 0.8.0, 0.6.0 +2 CWE-502

TI-2026-32721 CVE-2026-44843 · GHSA-pjwx-r37v-7724

LangChain: Unsafe deserialization of attacker-controlled LangChain objects through overly broad `load()` allowlists

MEDIUM 42

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00406 Published 2026-05-26 Partial fix · 0.3.85, 1.3.3 CWE-502

TI-2026-30075 CVE-2026-41488 · GHSA-r7w7-9xr2-qq2r

angchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding

LOW 14

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00158 Published 2026-04-24 Partial fix · 1.1.14 CWE-918

TI-2026-30068 CVE-2026-41481 · GHSA-fv5p-p927-qmxr

LangChain: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

LOW 28

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0026 Published 2026-04-24 Partial fix · 1.1.2 CWE-918

TI-2026-29805 CVE-2026-41182 · GHSA-rr7j-v2q5-chgv

LangSmith SDK: Streaming token events bypass output redaction

LOW 29

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00214 Published 2026-04-23 Fixed in 0.5.19, 0.7.31 CWE-200

TI-2026-29004 CVE-2026-40190 · GHSA-fw9q-39r9-c252

Prototype pollution in langchain-ai langsmith-sdk

HIGH 75

LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00325 Published 2026-04-10 Fixed in 0.5.18 CWE-1321

TI-2026-28915 CVE-2026-40087 · GHSA-926x-3r5x-gfhw

LangChain has incomplete f-string validation in prompt templates

LOW 30

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00272 Published 2026-04-09 Partial fix · 0.3.83, 1.2.28 +1 CWE-1336

Vulnerabilities

Filters