LangGraph SDK custom auth silently ignores actions= on resource decorators
- Product
- langgraph-sdk
- CVE
- CVE-2026-104873
- Affected
- langgraph-sdk 0.1.45 to 0.4.3
- Fixed in
- 0.4.4
Last verified against sources: October 26, 2026
Am I affected?
langgraph-sdk: affected langgraph-sdk 0.1.45 to 0.4.3. Fixed in 0.4.4.
- Check your version: run
pip show langgraph-sdk. Versions >= 0.1.45, <= 0.4.3 of langgraph-sdk are affected. [1]
What to do now
- Upgrade to the fixed version: run
pip install --upgrade "langgraph-sdk>=0.4.4"(first patched version 0.4.4). [1] - No workaround is available. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- The langgraph-sdk library mishandles the actions= setting on decorators that guard a resource. [1]
- Those decorators include @auth.on.threads, @auth.on.assistants, and @auth.on.crons. [1]
- A decorator meant to handle only chosen actions instead handles every action on the resource. [1]
- The resource-wide handler is picked before broader fallback handlers, so checks in those fallback handlers may not run. [1]
Impact
- An authenticated user may be able to do things the application meant to deny, such as reading, updating, or deleting another user's resource. [1]
- The risk depends on what the affected handler does; a deployment stays protected if that handler itself checks the needed action, ownership, or permission on every request. [1]
- Only Python deployments that use actions= on the affected resource-scoped decorators are affected. [1]
What was done
- The maintainers released version 0.4.4 as the patch. [1]
Sources
- GHSA-fvww-7h3r-vfhp — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
[CVE-2026-104873] LangGraph SDK custom auth silently ignores actions= on resource decorators
Product: langgraph-sdk | Affected: langgraph-sdk 0.1.45 to 0.4.3 | Fixed in: 0.4.4
Summary: The langgraph-sdk library mishandles the actions= setting on decorators that guard a resource.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/10/cve-2026-104873-langgraph-sdkCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for CVE-2026-104873
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.