What’s Vulnerable › Products

langchain-ai langgraph-api vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your langchain-ai langgraph-api version is affected

Latest langchain-ai langgraph-api vulnerabilities

• CVE-2026-118668 — LangGraph JavaScript custom authentication may permit cross-user Store access (CVSS 8.6)
• CVE-2026-55236 — langgraph-api: Incomplete assistant authorization in LangGraph Server run creation (CVSS 5.9)
• CVE-2026-55235 — langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication (CVSS 5.9)