8 matches found
PYSEC-2026-4240 LangGraph SDK custom auth silently ignores actions= on resource decorators
Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...
7.6CVSS7.2AI score0.00253EPSS
SaveExploits0References7
20