LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests (langchain-ai langgraph)
En bref
- Source
- NVD
- EPSS
- EPSS 0.39 % · centile 34 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- GitHub_M
- Statut NVD
- Awaiting Analysis
Description
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the synchronous and asynchronous v3 stream get_tree and _fetch_state helpers interpolate caller-controlled assistant_id and thread_id values into authenticated GET request paths without using _quote_path_param. Relative path segments can therefore be normalized into another readable path on the configured server while retaining authentication headers. This issue is fixed in langgraph-sdk 0.4.6 and langgraph 1.2.14.
Faiblesses (CWE)
- CWE-22 — Traversée de répertoire
Références
- https://github.com/langchain-ai/langgraph/security/advisories/GHSA-3fx2-cqw9-xr3c
- https://github.com/langchain-ai/langgraph/pull/9213
- https://github.com/langchain-ai/langgraph/commit/d89c7e100ec6fc1512544d23b0a7c5169699ef3e
- https://github.com/langchain-ai/langgraph/releases/tag/1.2.14
- https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.4.6
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | MEDIUM 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | GitHub_M |
| CVSS 3.1 | MEDIUM 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | NVD · security-advisories@github.com (Secondary) |
Avis
- GHSA-3fx2-cqw9-xr3c — LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests
Références européennes
- ENISA EUVD · EUVD-2026-112474
- GCVE · GCVE-0-2026-118667
Produits affectés
| Produit | Versions |
|---|---|
| langchain-ai · langgraph | affected >= 1.2.3, < 1.2.14 |
| langchain-ai · langgraph-sdk | affected >= 0.4.0, < 0.4.6 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |