SecurityClaw

SecurityClaw — Autonomous SOC Agentic Framework A modular, skill-based autonomous Security Operations Center SOC agent that monitors OpenSearch/Elasticsearch data, builds RAG-based behavioral memory, and validates real-time anomalies using LLMs. Features Skill Modularity — Capabilities as isolate...

tengu

Tengu — Pentesting MCP Server "In Japanese mythology, the Tengu is a fierce mountain spirit — master strategist, warrior, and trainer of samurai. In cybersecurity, it guides you through every phase of the hunt." From recon to report — AI-assisted pentesting in one command. Tengu is an MCP server...

CVE-2026-115885

A flaw was found in LangGraph CLI. When deploying applications with verbose logging enabled, the tool inadvertently outputs temporary container registry authentication tokens to the console. An unauthorized user with read access to terminal recordings or continuous integration CI build logs can...

anticipator

Anticipator Runtime security for multi-agent AI systems. Anticipator detects prompt injection, credential leakage, encoding attacks, homoglyph spoofing, path traversal, and anomalous agent behavior across LangGraph pipelines — before they become incidents. No LLMs. No embeddings. No external APIs...

CVE-2026-118668

A flaw was found in langgraph-api. In deployments using JavaScript or TypeScript custom authorization handlers, rewritten storage namespaces intended to isolate tenant data are not properly enforced across the runtime boundary before storage operations execute. An authenticated remote attacker ca...

CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection

CVE-2025-67644 PoC – LangGraph SQLite Checkpoint SQL Injection CVE-2025-67644 is a SQL Injection vulnerability CWE-89 in the langgraph-checkpoint-sqlite package part of LangGraph / LangChain ecosystem. It allows an attacker to inject arbitrary SQL via unsanitized metadata filter keys passed to th...

CVE-langgraph

cve-id ⚡ Simple Usage Use this project only in safe and authorized environments such as: Local virtual machines Docker containers Isolated lab setups Authorized penetration testing environments Example setup: git clone cd Project use python follow below Create a virtual environment python -m venv...

CVE-2026-118667

A flaw was found in LangGraph. Helper functions responsible for streaming operations fail to properly sanitize caller-controlled identifiers before inserting them into authenticated request paths. An attacker can supply path traversal sequences within these identifiers to redirect requests to...

SUSE CVE-2026-118667

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

SUSE CVE-2026-118668

langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten namespace that is not carried across the runtime boundary and applied before the Store operatio...

LangGraph CLI Prints The Registry Push Token In `langgraph Deploy --verbose` Output

Summary "langgraph deploy --verbose" printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, "langgraph deplo...

LangGraph: Unencoded Identifiers In LangGraph SDK V3 Streaming Can Redirect Authenticated GET Requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied "threadid" and "assistantid" values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another pat...

CVE-2026-118668

langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten namespace that is not carried across the runtime boundary and applied before the Store operatio...

CVE-2026-118667

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

EUVD-2026-109183

LangGraph CLI prints the registry push token in langgraph deploy --verbose output...

swe-forge (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-115885 via langgraph-cli (0.4.27)

langgraph-cli PYPI version 0.4.27 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-cli and may be impacted: - swe-forge =0.2.2, =0.2.3 Source cves: CVE-2026-115885 Source advisory: GHSA-8PRR-F582-JQQ3...

GHSA-8PRR-F582-JQQ3 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

Summary langgraph deploy --verbose printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, langgraph deploy...

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

Summary langgraph deploy --verbose printed the temporary registry push token that the CLI uses to log Docker in to the deployment's image registry. Anyone who could read that output, for example in CI logs, could use the token until it expired. Details When Docker is available, langgraph deploy...

swe-forge (>=0.2.2, <=0.2.3) potentially affected by CVE-2026-115885 via langgraph-cli (0.4.27)

langgraph-cli PYPI version 0.4.27 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-cli and may be impacted: - swe-forge =0.2.2, =0.2.3 Source cves: CVE-2026-115885 Source advisory: OSV:GHSA-8PRR-F582-JQQ3...

GHSA-4HM6-W6QQ-W73V LangGraph JavaScript custom authentication may permit cross-user Store access

Summary LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. Required...