{"data":{"id":"265f101f-4c7f-425d-b2a2-6593fd0c4e14","title":"GHSA-3fx2-cqw9-xr3c: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests","summary":"The LangGraph Python SDK v3 streaming client, in `langgraph-sdk` versions 0.4.0 through 0.4.5, inserts caller-supplied `thread_id` and `assistant_id` values into request paths without encoding them, in the `get_tree` and `_fetch_state` implementations. Relative path segments in these values can redirect an authenticated GET request to another readable path on the configured server, and the SDK returns that response to the application. `RemoteGraph` v3 streaming in `langgraph` 1.2.3 and later is also affected when it pairs with a vulnerable SDK version.","solution":"Upgrade `langgraph-sdk` to version 0.4.6 or later. If you use `RemoteGraph`, also upgrade `langgraph` to version 1.2.14 or later, which requires `langgraph-sdk>=0.4.6`.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3fx2-cqw9-xr3c","publishedAt":"2026-10-28T21:05:47.000Z","cveId":"CVE-2026-118667","cweIds":["CWE-22"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langgraph-sdk@>= 0.4.0, < 0.4.6 (fixed: 0.4.6)","langgraph@>= 1.2.3, < 1.2.14 (fixed: 1.2.14)"],"affectedPackageNames":["langgraph-sdk","langgraph"],"affectedPackageRefs":["pypi:langgraph-sdk","pypi:langgraph"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","LangGraph SDK","RemoteGraph"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00394,"epssCheckedAt":"2026-10-30T00:10:46.332Z","kevDateAdded":null,"advisoryAliases":["GHSA-3fx2-cqw9-xr3c"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-10-28T21:05:47.000Z","fixReleasedAt":"2026-10-06T14:17:52.134Z","daysToFix":-22,"fixCheckedAt":"2026-10-30T00:10:50.991Z","capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"langgraph","fixedVersion":"1.2.14","matchedVersion":"1.2.14","fixReleasedAt":"2026-10-06T14:41:18.129Z","daysToFix":-22,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-30T00:10:50.986Z"},{"ecosystem":"pypi","name":"langgraph-sdk","fixedVersion":"0.4.6","matchedVersion":"0.4.6","fixReleasedAt":"2026-10-06T14:17:52.134Z","daysToFix":-22,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-30T00:10:50.986Z"}]}}