{"data":{"id":"2ac9a233-9cdd-441e-bc01-61fa4719b545","title":"GHSA-2c9q-c2q9-qgqv: langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication","summary":"LangGraph Server had a security flaw where webhooks (automated messages sent to other services) with relative targets could bypass authentication checks by routing requests internally without verifying the user's identity. This could allow one user to create or modify runs (execution records) on threads (conversation sessions) owned by another user, and view limited information about other users' threads.","solution":"Upgrade to langgraph-api version 0.10.0 or later. The webhook URL policy now has `webhooks.url.disable_loopback` enabled by default, which blocks loopback delivery (requests sent back to the same server). If your deployment legitimately needs to send webhooks to routes on the same process, you can set `webhooks.url.disable_loopback: false` in `langgraph.json` or the equivalent `LANGGRAPH_WEBHOOKS` environment variable configuration, but only if you control those routes and apply authorization checks within them.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-2c9q-c2q9-qgqv","publishedAt":"2026-08-19T18:55:57.000Z","cveId":"CVE-2026-55235","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":["rag_poisoning"],"issueType":"vulnerability","affectedPackages":["langgraph-api@< 0.10.0 (fixed: 0.10.0)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","LangGraph Server","LangGraph Platform"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-19T18:55:57.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0020","AML.T0051.001"]}}