CVE-2026-55236 langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value instead of the assistants.read event used by direct reads and cro...

CVE-2026-55236: Improper Authorization

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value instead of the assistants.read event used by direct reads and cro...

CVE-2026-55235: Improper Authentication

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, langgraph-api permits a run or cron to specify a relative webhook target that is delivered through an in-process loopback transport, and the authentication middleware treats that transport as internal...

mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-55253 via langgraph-checkpoint-mongodb (0.2.1)

langgraph-checkpoint-mongodb PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-mongodb and may be impacted: - mseep-deer-flow =0.1.0, =0.1.1 Source cves: CVE-2026-55253 Source advisory: OSV:PYSEC-2026-3859...

LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive SummaryA NoSQL injection issue exists in the langgraph-checkpoint-mongodb andlanggraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methodsaccept a filter parameter that is incorporated into MongoDB queries without sufficient validation.Because MongoDB query operat...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: OSV:PYSEC-2026-3860...

PYSEC-2026-3857 langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

Summary In affected versions of langgraph-api the LangGraph Server runtime, a run or cron could be created with a relative webhook target. When the server later delivers such a webhook, it routes the request back into the same application through an in-process loopback transport that the...

langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication

SummaryIn affected versions of langgraph-api the LangGraph Server runtime, a run or cron could be created with a relative webhook target. When the server later delivers such a webhook, it routes the request back into the same application through an in-process loopback transport that the...

PYSEC-2026-3858 langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

Summary In affected versions of langgraph-api the LangGraph Server runtime, the run-creation path authorized the assistant attached to a run using a different authorization event than the rest of the assistant-handling code paths. Direct assistant reads and cron creation dispatch the...

langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

SummaryIn affected versions of langgraph-api the LangGraph Server runtime, the run-creation path authorized the assistant attached to a run using a different authorization event than the rest of the assistant-handling code paths. Direct assistant reads and cron creation dispatch the assistants.re...

agentiacap (>=0.1.2, <=0.1.10), agntrick-whatsapp (>=0.2.0, <=0.3.7) +89 more potentially affected by CVE-2026-55235 via langgraph-api (>=0.0.22, <=0.9.1)

langgraph-api PYPI version =0.0.22, =0.1.2, =0.2.0, =0.0.1, =0.1.1, =0.1.4, =0.1.3, =1.0.0, =0.1.0, =0.1.0, =0.2.2, =0.3.0b1, =0.1.24rc7, =0.1.2, =0.1.32 - universal-mcp-ahrefs 0.1.1 and more Source cves: CVE-2026-55235 Source advisory: OSV:PYSEC-2026-3857...

agentiacap (>=0.1.2, <=0.1.10), agntrick-whatsapp (>=0.2.0, <=0.3.7) +89 more potentially affected by CVE-2026-55236 via langgraph-api (>=0.0.22, <=0.9.1)

langgraph-api PYPI version =0.0.22, =0.1.2, =0.2.0, =0.0.1, =0.1.1, =0.1.4, =0.1.3, =1.0.0, =0.1.0, =0.1.0, =0.2.2, =0.3.0b1, =0.1.24rc7, =0.1.2, =0.1.32 - universal-mcp-ahrefs 0.1.1 and more Source cves: CVE-2026-55236 Source advisory: OSV:PYSEC-2026-3858...

cognee-integration-langgraph (>=0.1.0, <=0.1.3) potentially affected by CVE-2026-58473 via cognee (0.3.3)

cognee PYPI version 0.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on cognee and may be impacted: - cognee-integration-langgraph =0.1.0, =0.1.3 Source cves: CVE-2026-58473 Source advisory: OSV:PYSEC-2026-3816...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.323 Vulnerability Details CVEID:CVE-2026-48776 DESCRIPTION: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python...

GHSA-533J-2V4Q-MW5H LangChain MongoDB has NoSQL Operator Injection in MongoDBSaver.list() leading to cross-tenant data exposure

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...

mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-55253 via langgraph-checkpoint-mongodb (0.2.1)

langgraph-checkpoint-mongodb PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-mongodb and may be impacted: - mseep-deer-flow =0.1.0, =0.1.1 Source cves: CVE-2026-55253 Source advisory: OSV:GHSA-533J-2V4Q-MW5H...

mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-55253 via langgraph-checkpoint-mongodb (0.2.1)

langgraph-checkpoint-mongodb PYPI version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-mongodb and may be impacted: - mseep-deer-flow =0.1.0, =0.1.1 Source cves: CVE-2026-55253 Source advisory: GHSA-533J-2V4Q-MW5H...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: GHSA-533J-2V4Q-MW5H...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: OSV:GHSA-533J-2V4Q-MW5H...

PT-2026-80222

Executive Summary A NoSQL injection issue exists in the langgraph-checkpoint-mongodb and langgraph-store-mongodb libraries. MongoDBSaver.list and MongoDBStore.search methods accept a filter parameter that is incorporated into MongoDB queries without sufficient validation. Because MongoDB query...