SUSE CVE-2026-118667

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

LangGraph: Unencoded Identifiers In LangGraph SDK V3 Streaming Can Redirect Authenticated GET Requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied "threadid" and "assistantid" values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another pat...

CVE-2026-118667

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

GHSA-3FX2-CQW9-XR3C LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied threadid and assistantid values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on...

chemgraph (0.7.0), divakar-cli-agent (>=0.1.0, <=0.1.10) +1 more potentially affected by CVE-2026-118667 via langgraph-sdk (>=0.4.3, <=0.4.5)

langgraph-sdk PYPI version =0.4.3, =0.1.0, =0.1.0, =0.5.6 Source cves: CVE-2026-118667 Source advisory: SNYK:PYTHON-LANGGRAPHSDK-21816464...

LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

Summary The LangGraph Python SDK v3 streaming client interpolates caller-supplied threadid and assistantid values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on...

chemgraph (0.7.0), divakar-cli-agent (>=0.1.0, <=0.1.10) +1 more potentially affected by CVE-2026-118667 via langgraph-sdk (>=0.4.3, <=0.4.5)

langgraph-sdk PYPI version =0.4.3, =0.1.0, =0.1.0, =0.5.6 Source cves: CVE-2026-118667 Source advisory: GHSA-3FX2-CQW9-XR3C...

chemgraph (0.7.0), divakar-cli-agent (>=0.1.0, <=0.1.10) +1 more potentially affected by CVE-2026-118667 via langgraph-sdk (>=0.4.3, <=0.4.5)

langgraph-sdk PYPI version =0.4.3, =0.1.0, =0.1.0, =0.5.6 Source cves: CVE-2026-118667 Source advisory: OSV:GHSA-3FX2-CQW9-XR3C...

Directory Traversal

Overview langgraph-sdk is a SDK for interacting with LangGraph API Affected versions of this package are vulnerable to Directory Traversal via unencoded threadid and assistantid interpolated directly into REST request paths in async/stream.py and sync/stream.py. The fetchstate method builds...

CVE-2026-118667 LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

CVE-2026-118667

The LangGraph Python SDK is vulnerable to a path traversal issue in its v3 streaming client (synchronous and asynchronous) across langgraph-sdk versions 0.4.0 through 0.4.5 and langgraph versions 1.2.3 through 1.2.14. The get_tree and _fetch_state helpers fail to use _quote_path_param when interp...

CVE-2026-118667 LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

chemgraph (0.7.0), divakar-cli-agent (>=0.1.0, <=0.1.10) +1 more potentially affected by CVE-2026-118667 via langgraph-sdk (>=0.4.3, <=0.4.5)

langgraph-sdk PYPI version =0.4.3, =0.1.0, =0.1.0, =0.5.6 Source cves: CVE-2026-118667 Source advisory: MEND:CVE-2026-118667...

CVE-2026-118667 LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

CVE-2026-118667: Improper Limitation of a Pathname to a Restricted Directory

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the...

LangChain LangGraph path traversal vulnerability

Versions 1.2.3 through 1.2.14 of LangChain LangGraph and versions 0.4.0 through 0.4.6 of langgraph-sdk contain a path traversal vulnerability. This vulnerability arises because the gettree and fetchstate helper functions for synchronous and asynchronous v3 streams fail to escape the quotepathpara...

PT-2026-129188

Name of the Vulnerable Software and Affected Versions langgraph-sdk versions 0.4.0 through 0.4.5 langgraph versions 1.2.3 through 1.2.13 Description The LangGraph Python SDK v3 streaming client fails to encode caller-supplied thread id and assistant id values when interpolating them into request...

PT-2026-127774

These are all security issues fixed in the python313-langgraph-sdk-0.4.9-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12279-1 python313-langgraph-sdk-0.4.9-1.1 on GA media

These are all security issues fixed in the python313-langgraph-sdk-0.4.9-1.1 package on the GA media of openSUSE Tumbleweed...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +469 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.0a3 and more Source cves: CVE-2026-104873 Source advisory: OSV:PYSEC-2026-4240...