{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3alangchainlanggraph-api/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:langchain:langgraph-api:*:*:*:*:*:*:*:*"],"_cs_cves":[{"id":"CVE-2026-118668"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["langgraph-api (\u003c 0.15.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["LangChain"],"content_html":"\u003cp\u003eThe LangChain \u003ccode\u003elanggraph-api\u003c/code\u003e package contains an authorization vulnerability (CVE-2026-118668) affecting deployments that utilize JavaScript or TypeScript custom authentication handlers. If the handler is configured to rewrite namespaces to restrict user access, the runtime fails to correctly apply these modifications. This allows an authenticated user to perform unauthorized read, search, modify, or delete operations on Store data residing in other users' namespaces.\u003c/p\u003e\n\u003cp\u003eThe issue does not affect Python-based handlers or JavaScript/TypeScript handlers that reject (rather than rewrite) unauthorized requests.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows an authenticated user to bypass logical access controls within the LangGraph Store. This results in unauthorized access, modification, or destruction of data belonging to other users. No administrative privileges or user interaction are required to exploit the flaw.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade \u003ccode\u003elanggraph-api\u003c/code\u003e to version 0.15.0 or later immediately.\u003c/li\u003e\n\u003cli\u003eFor environments unable to patch, modify JavaScript/TypeScript authorization handlers to explicitly reject requests for unauthorized namespaces, rather than relying on internal namespace rewriting.\u003c/li\u003e\n\u003cli\u003eConduct a review of all Store-related authorization logic to ensure requests are rejected upon unauthorized access attempts.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-29T00:12:14Z","date_published":"2026-10-29T00:12:14Z","id":"https://feed.craftedsignal.io/briefs/2026-10-langgraph-auth-bypass-894be0bf/","summary":"A vulnerability in langgraph-api custom authentication for JavaScript and TypeScript handlers allows authenticated users to access Store data outside their assigned namespace via failed authorization rewriting.","title":"LangChain langgraph-api: Store authorization bypass (CVE-2026-118668)","url":"https://feed.craftedsignal.io/briefs/2026-10-langgraph-auth-bypass-894be0bf/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:langchain:langgraph-Api:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}