LangGraph: Unencoded Identifiers In LangGraph SDK V3 Streaming Can Redirect Authenticated GET Requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied "threadid" and "assistantid" values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another pat...

GHSA-3FX2-CQW9-XR3C LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied threadid and assistantid values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on...

Directory Traversal

Overview langgraph-sdk is a SDK for interacting with LangGraph API Affected versions of this package are vulnerable to Directory Traversal via unencoded threadid and assistantid interpolated directly into REST request paths in async/stream.py and sync/stream.py. The fetchstate method builds...

Directory Traversal

Overview langgraph is a Building stateful, multi-actor applications with LLMs Affected versions of this package are vulnerable to Directory Traversal via unencoded threadid and assistantid interpolated directly into REST request paths in async/stream.py and sync/stream.py. The fetchstate method...

LangChain LangGraph path traversal vulnerability

Versions 1.2.3 through 1.2.14 of LangChain LangGraph and versions 0.4.0 through 0.4.6 of langgraph-sdk contain a path traversal vulnerability. This vulnerability arises because the gettree and fetchstate helper functions for synchronous and asynchronous v3 streams fail to escape the quotepathpara...