LangGraph JavaScript custom authentication may permit cross-user Store access
- Product
- langgraph-api
- CVE
- CVE-2026-118668
- Affected
- langgraph-api >= 0.1.2, < 0.15.0
- Fixed in
- 0.15.0
Last verified against sources: October 29, 2026
Am I affected?
langgraph-api: affected langgraph-api >= 0.1.2, < 0.15.0. Fixed in 0.15.0.
- Check your version: run
pip show langgraph-api. Versions >= 0.1.2, < 0.15.0 of langgraph-api are affected. [1]
What to do now
- Upgrade to the fixed version: run
pip install --upgrade "langgraph-api>=0.15.0"(first patched version 0.15.0). [1] - Users should upgrade to
langgraph-api>=0.15.0. [1] - Deployments that cannot upgrade immediately should change JavaScript or TypeScript Store authorization handlers to reject requests for unauthorized namespaces rather than relying on namespace rewriting. [1]
- This workaround must be applied to every Store action exposed by the deployment. [1]
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
What happened
- LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. [1]
- In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. [1]
- Python custom authentication handlers are not affected. [1]
- JavaScript or TypeScript handlers that reject unauthorized namespace requests instead of rewriting them are also not affected. [1]
Impact
What was done
- The issue is fixed in
langgraph-apiversion0.15.0. [1] - The server now carries changes made by a JavaScript or TypeScript authorization handler across the runtime boundary and applies them before performing the Store operation. [1]
- It validates the resulting namespace after authorization and rejects the request if an authorization change is malformed or cannot be applied safely. [1]
Sources
- GHSA-4hm6-w6qq-w73v — GitHub Advisory Database
Every statement above was checked against these sources before publishing. Spotted an error? Tell us and we will correct it with a dated note.
Share advisory brief with your team
Copy a plain-text summary for Slack, GitHub issues, or team security channels.
[CVE-2026-118668] LangGraph JavaScript custom authentication may permit cross-user Store access
Product: langgraph-api | Affected: langgraph-api >= 0.1.2, < 0.15.0 | Fixed in: 0.15.0
Summary: LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler.
Source & remediation on AgentArmorHQ: https://agentarmorhq.com/incidents/2026/10/cve-2026-118668-langgraph-apiCorrections
Report an error or request a correction. We review requests within 5 business days and add a dated correction note.
Discussions for CVE-2026-118668
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.