364 matches found
SecurityClaw
SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...
anticipator
Anticipator Runtime security for multi-agent AI systems. Anticipator detects prompt injection, credential leakage, encoding attacks, homoglyph spoofing, path traversal, and anomalous agent behavior across LangGraph pipelines — before they become incidents. No LLMs. No embeddings. No external APIs...
tengu
Tengu — Pentesting MCP Server "In Japanese mythology, the Tengu is a fierce mountain spirit — master strategist, warrior, and trainer of samurai. In cybersecurity, it guides you through every phase of the hunt." From recon to report — AI-assisted pentesting in one command. Tengu is an MCP server...
CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection
CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...
CVE-langgraph
cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...
cs440-langgraph-nosql-demo
CS440 · NoSQL Injection in LangGraph's MongoDBSaver A small, local, browser-based demonstration of a real, published security advisory: unvalidated checkpoint identifiers in the LangGraph MongoDBSaver integration let an attacker smuggle a MongoDB query operator into an identifier field and read...
python313-langgraph-sdk-0.4.9-1.1 on GA media (moderate)
python313-langgraph-sdk-0.4.9-1.1 on GA media Announcement ID: openSUSE-SU-2026:12279-1 Rating: moderate Cross-References: CVE-2026-104873 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
CVE-2026-115885
A flaw was found in LangGraph CLI. When deploying applications with verbose logging enabled, the tool inadvertently outputs temporary container registry authentication tokens to the console. An unauthorized user with read access to terminal recordings or continuous integration CI build logs can...
CVE-2026-118668
A flaw was found in langgraph-api. In deployments using JavaScript or TypeScript custom authorization handlers, rewritten storage namespaces intended to isolate tenant data are not properly enforced across the runtime boundary before storage operations execute. An authenticated remote attacker ca...
CVE-2026-118667
A flaw was found in LangGraph. Helper functions responsible for streaming operations fail to properly sanitize caller-controlled identifiers before inserting them into authenticated request paths. An attacker can supply path traversal sequences within these identifiers to redirect requests to...
SUSE CVE-2026-118667
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...
SUSE CVE-2026-118668
langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten namespace that is not carried across the runtime boundary and applied before the Store operatio...
LangGraph CLI Prints The Registry Push Token In `langgraph Deploy --verbose` Output
Summary "langgraph deploy --verbose" printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, "langgraph deplo...
LangGraph: Unencoded Identifiers In LangGraph SDK V3 Streaming Can Redirect Authenticated GET Requests
Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied "threadid" and "assistantid" values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another pat...
Authorization Bypass Through User-Controlled Key
Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via JavaScript or TypeScript custom authentication Store authorization handlers, which can return a rewritten namespace that is not carried across the runtime boundary and applied before...
CVE-2026-118668
langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten namespace that is not carried across the runtime boundary and applied before the Store operatio...
CVE-2026-118667
LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...
swe-forge (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-115885 via langgraph-cli (0.4.27)
langgraph-cli PYPI version 0.4.27 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-cli and may be impacted: - swe-forge =0.2.2, =0.2.3 Source cves: CVE-2026-115885 Source advisory: GHSA-8PRR-F582-JQQ3...
GHSA-8PRR-F582-JQQ3 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
Summary langgraph deploy --verbose printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, langgraph deploy...
