ZDF
Sign inSign up

Vulnerabilities

Vulnerability · CVE-2026-118668

LangGraph JavaScript custom authentication may permit cross-user Store access

Published Oct 28, 2026 · catalog updated Oct 28, 2026 · LangGraph JavaScript custom authentication

Last checked Nov 4, 2026. A connected source was read within the last 7 days.

Check if you run it

No confirmed exploitation is on record for CVE-2026-118668. EPSS is 0.37%. Act only if a listed version of LangGraph JavaScript custom authentication is installed.

Gaps on this record

  • The stored product name is a package slug. The name on this page is taken from the title (LangGraph JavaScript custom authentication).
  • No vendor fix or required action is stored. Compare the linked advisory before you change production.
Severity
High—
Known exploitation
Not in CISA/VulnCheck KEV
EPSS
0.37%
Remediation
Version ranges on file
Affected products
pip langgraph-api · pypi langgraph-api

## Summary LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. ## Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affected version. - It runs JavaScript or TypeScript custom authentication. - Its Store authorization handler relies on rewriting the requested namespace to restrict each user to their own data. - The attacker can authenticate as an ordinary user. - Multiple users' data is stored through the affected authorization path. Python custom authentication handlers are not affected. JavaScript or TypeScript handlers that reject unauthorized namespace requests instead of rewriting them are also not affected. The attack does not require administrator privileges, user interaction, a race condition, or the bypass of another mitigation. ## Impact An authenticated user may be able to read, overwrite, search, or delete Store data belonging to another user. ## Patches The issue is fixed in version . The server now carries changes made by a JavaScript or TypeScript authorization handler across the runtime boundary and applies them before performing the Store operation. It validates the resulting namespace after authorization and rejects the request if an authorization change is malformed or cannot be applied safely. Users should upgrade to . ## Workarounds Deployments that cannot upgrade immediately should change JavaScript or TypeScript Store authorization handlers to reject requests for unauthorized namespaces rather than relying on namespace rewriting. This workaround must be applied to every Store action exposed by the deployment.

Are you affected?

Enter the version you run. The result uses only the ranges stored on this record.

The check returns affected, not affected, or incomplete. It does not guess a version that is missing from the record.

  • pip langgraph-api>= 0.1.2, < 0.15.0
  • pypi langgraph-apiversion unspecified

How to fix CVE-2026-118668

What to do

Three questions, each answered from this record only. Confirm the vendor advisory before you patch.

Should you patch?

No confirmed exploitation is on record for CVE-2026-118668. EPSS is 0.37%. Act only if a listed version of LangGraph JavaScript custom authentication is installed.

Which versions are affected?

Compare what you have installed with >= 0.1.2, < 0.15.0. Compare the installed version with the linked vendor advisory before you change production.

What should an analyst verify?

CWE-639: Authorization Bypass Through User-Controlled Key; CWE-863: Incorrect Authorization. EPSS 0.37%. There is no CISA KEV listing. No Exploit-DB or Metasploit reference is linked. Use the source links for the original advisory.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 28, 2026 · GitHub Advisory Database

    Detected

    ## Summary LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. ## Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affe

  2. Oct 28, 2026 · GitHub Advisory Database

    Updated

    ## Summary LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. ## Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affe

Sources

  • CVE.orgVulnerability recordCVE-2026-118668

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-118668

    30-day exploitation probability 0.37%

    first.org
  • GitHub Advisory DatabasePackage advisoryGHSA-4hm6-w6qq-w73v

    LangGraph JavaScript custom authentication may permit cross-user Store access

    github.com
  • GitLab Advisory DatabasePackage advisoryCVE-2026-118668

    LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace.

    advisories.gitlab.com

References

Freshness

Last verified in this catalog Nov 4, 2026. Significant claims (KEV, EPSS, CVSS, affected ranges) come from the source rows above — open the original publisher for the authoritative advisory.

  • FIRST EPSSNov 4, 2026
  • GitLab Advisory DatabaseOct 30, 2026
  • CVE.orgOct 29, 2026
  • GitHub Advisory DatabaseOct 29, 2026