a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: OSV:PYSEC-2026-4240...

LangGraph SDK custom auth silently ignores actions= on resource decorators

ImpactWhat kind of vulnerability is it? Who is impacted?langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons.In affected versions, a decorator such...

PYSEC-2026-4240 LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

ROOT-APP-PYPI-CVE-2026-104873 CVE-2026-104873 in langgraph-sdk - Patched by Root

Root has patched CVE-2026-104873 in the langgraph-sdk package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-48776 CVE-2026-48776 in langgraph-sdk - Patched by Root

Root has patched CVE-2026-48776 in the langgraph-sdk package for Root:PyPI. Multiple fixed versions available...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: OSV:GHSA-FVWW-7H3R-VFHP...

GHSA-FVWW-7H3R-VFHP LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: GHSA-FVWW-7H3R-VFHP...

LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: SNYK:PYTHON-LANGGRAPHSDK-20417225...

Incorrect Authorization

Overview langgraph-sdk is a SDK for interacting with LangGraph API Affected versions of this package are vulnerable to Incorrect Authorization via the ResourceOn.call method in langgraphsdk/auth/init.py, where custom authorization handlers registered with resource-specific decorators fail to...

CVE-2026-104873

A flaw was found in langgraph-sdk. This vulnerability allows an authenticated attacker to bypass authorization controls to access, modify, or delete resources belonging to other users. The issue occurs because resource-scoped authorization decorators fail to restrict handlers to specified actions...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +470 more potentially affected by CVE-2026-104873 via langgraph-sdk (>=0.1.48, <=0.4.3)

langgraph-sdk PYPI version =0.1.48, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-104873 Source advisory: MEND:CVE-2026-104873...

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.323 Vulnerability Details CVEID:CVE-2026-48776 DESCRIPTION: LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +343 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: OSV:PYSEC-2026-2575...

PT-2026-59232

Summary langgraph-sdk constructs HTTP request paths for resource operations by interpolating caller-supplied identifier values into URL templates. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to addre...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +343 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: GHSA-W39P-VH2G-G8G5...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +343 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: OSV:GHSA-W39P-VH2G-G8G5...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Overview langgraph-sdk is a SDK for interacting with LangGraph API Affected versions of this package are vulnerable to Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in the construction of HTTP request paths using unsanitized identifier values. An attacker can gain...

a2a-client-handler (0.1.0), abs-langchain-suite (>=0.1.5, <=0.3.1) +343 more potentially affected by CVE-2026-48776 via langgraph-sdk (>=0.1.33, <=0.3.14)

langgraph-sdk PYPI version =0.1.33, =0.1.5, =0.1.0, =0.1.0, =0.1.1, =0.1.1, =0.0.1a0, =2.1.7, =0.0.2, =0.1.1, =0.1.0, =0.2.0a1, =0.2.5a2, =1.1.0 and more Source cves: CVE-2026-48776 Source advisory: SNYK:PYTHON-LANGGRAPHSDK-17372912...