Lucene search
+L

1 matches found

OSV
OSV
added 2026/09/14 3:51 p.m.7 views

CVE-2026-55236 langgraph-api: Incomplete assistant authorization in LangGraph Server run creation

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, the langgraph-api run-creation path authorizes the assistant attached to a run by dispatching assistants.search with an incomplete value instead of the assistants.read event used by direct reads and cro...

5.9CVSS5.9AI score
SaveExploits0References4
Rows per page
Query Builder