GHSA-w39p-vh2g-g8g5: LangGraph SDK has unsafe URL path construction

Summary

The langgraph-sdk builds HTTP request paths by interpolating caller-supplied identifier values into URL templates without sanitization. Identifiers containing URL-special characters can address a different resource or resource type than the call site indicates, potentially exposing, modifying or deleting resources beyond the caller's authorization scope.

Mitigation

The SDK now applies path-segment encoding to identifier values before interpolation into request URL templates. Applications should also validate identifier values (typically as UUIDs) at the boundary where untrusted input enters the application, before passing them to SDK methods.

Affected packages in the Exposure Registry

Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.

• langgraph-sdkPyPILLM dependency since 2024-05-02 · 3 tracked dependents

Related items

• MediumGHSA-8prr-f582-jqq3: LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputSame vendor · GitHub Advisory Database
• HighGHSA-4hm6-w6qq-w73v: LangGraph JavaScript custom authentication may permit cross-user Store accessSame vendor · GitHub Advisory Database
• MediumGHSA-3fx2-cqw9-xr3c: LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestsSame vendor · GitHub Advisory Database
• MediumGHSA-6hmw-9432-67qq: LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storesSame vendor · GitHub Advisory Database
• MediumCVE-2026-108575: BerriAI LiteLLM improper authorization in secret resolution via api_keySame vendor · NVD/CVE Database