CVE-2026-118667mediumCWE-22

CVE-2026-118667: medium-severity vulnerability in langchain-ai langgraph

LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Published · Updated

Follow this CVE+ Monitor langgraph+ Monitor langgraph-sdk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.4%
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the synchronous and asynchronous v3 stream get_tree and _fetch_state helpers interpolate caller-controlled assistant_id and thread_id values into authenticated GET request paths without using _quote_path_param. Relative path segments can therefore be normalized into another readable path on the configured server while retaining authentication headers. This issue is fixed in langgraph-sdk 0.4.6 and langgraph 1.2.14.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
langchain-ai · langgraphlangchain-ai · langgraph-sdk
Related CVEs — langchain-ai langgraph

In the same product, most dangerous first.

CVE-2026-28277MEDIUMLangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loadingEPSS 5.5%CVE-2025-67644HIGHLangGraph SQLite Checkpoint is vulnerable to SQL Injection via metadata filter key in checkpointer list methodEPSS 2.3%CVE-2025-64439HIGHLangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializerEPSS 0.9%CVE-2026-71433MEDIUMLangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite storesEPSS 0.4%CVE-2026-115883MEDIUMLangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesEPSS 0.3%CVE-2026-104873HIGHLangGraph SDK custom auth silently ignores actions= on resource decoratorsEPSS 0.3%