Vulnerability in LangGraph SDK and API Server Interaction
CVE-2026-118667

4.3MEDIUM

Key Information:

Vendor

Langchain-ai

Status
Langgraph
Langgraph-sdk
Vendor
CVE Published:
28 October 2026

What is CVE-2026-118667?

A significant vulnerability in LangGraph's Python SDK allows manipulation of authenticated GET requests due to insufficient sanitization of user input. Specifically, the assistant_id and thread_id values are interpolated into request paths without proper quoting, enabling potential path traversal. This mechanism could lead to unauthorized access to sensitive information or operations on the server. The issue has been rectified in langgraph-sdk version 0.4.6 and langgraph version 1.2.14, underscoring the necessity for users to update to these versions to mitigate associated risks.

Affected Version(s)

langgraph >= 1.2.3, < 1.2.14

langgraph-sdk >= 0.4.0, < 0.4.6

References

https://github.com/langchain-ai/langgraph/security/adviso...
x_refsource_CONFIRM
https://github.com/langchain-ai/langgraph/pull/9213
x_refsource_MISC
https://github.com/langchain-ai/langgraph/commit/d89c7e10...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.