{"data":{"id":"9e274458-0627-4716-8486-393e3635d142","title":"GHSA-jfj5-wrj9-63x4: langgraph-api: Incomplete assistant authorization in LangGraph Server run creation","summary":"LangGraph Server had an authorization bug where creating a run could bypass security checks and access another user's private assistant if custom authorization handlers only registered an `assistants.read` handler (a permission check for reading assistants). This allowed the requesting user to see sensitive configuration data like metadata, config, and context from assistants they shouldn't have access to.","solution":"Run creation and cron-creation paths now dispatch the `assistants.read` authorization event in both the in-memory and gRPC/Postgres runtimes, matching direct assistant reads. Fixed in `langgraph-api` 0.10.0. Deployments with custom handlers should register an `assistants.read` handler that returns an owner-style filter, and confirm parity across the assistant read, search, and run/cron creation paths.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-jfj5-wrj9-63x4","publishedAt":"2026-08-19T18:56:03.000Z","cveId":"CVE-2026-55236","cweIds":null,"cvssScore":null,"cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":["langgraph-api@< 0.10.0 (fixed: 0.10.0)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["LangGraph","LangChain"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-19T18:56:03.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}