{"data":{"id":"089120b8-a1a8-4175-ae78-e15b60c912a2","title":"GHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output","summary":"`langgraph deploy --verbose` in `langgraph-cli` 0.4.15 through 0.4.31 printed the temporary registry push token that the CLI passes to `docker login --password-stdin`. Anyone who could read that output, such as CI logs, could use the token for up to 12 hours, limited to the deployment's image repository, to pull images and push new ones.","solution":"Upgrade to `langgraph-cli` 0.4.32 or later. 0.4.37 also stops `--verbose` from printing the input of any command the CLI runs. Tokens printed more than 12 hours ago have expired.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-8prr-f582-jqq3","publishedAt":"2026-10-28T21:13:18.000Z","cveId":"CVE-2026-115885","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["langgraph-cli@>= 0.4.15, <= 0.4.31 (fixed: 0.4.32)"],"affectedPackageNames":["langgraph-cli"],"affectedPackageRefs":["pypi:langgraph-cli"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","LangGraph CLI","LangSmith"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00114,"epssCheckedAt":"2026-10-29T00:11:01.286Z","kevDateAdded":null,"advisoryAliases":["GHSA-8prr-f582-jqq3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-28T21:13:18.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":["AML.T0010"]}}