LangGraph JavaScript custom authentication may permit cross-user Store access
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.15.0
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
- Exploitation: none
- Automatable: no
- Technical impact: total
Summary
LangGraph API's JavaScript and TypeScript custom authentication can fail to apply namespace rewrites to Store operations, so an authenticated user may read, change, search, or delete another user's stored data in deployments that depend on namespace rewriting for isolation. Python custom authentication and handlers that reject unauthorized namespaces are not affected.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
langgraph-api implements the LangGraph API for rapid development and testing. From 0.1.2 until 0.15.0, JavaScript or TypeScript custom authentication Store authorization handlers can return a rewritten namespace that is not carried across the runtime boundary and applied before the Store operation. An authenticated user can therefore access another user's Store namespace when a deployment relies on namespace rewriting for isolation, allowing unauthorized reads, overwrites, searches, or deletions. Python custom authentication and handlers that reject unauthorized namespaces instead of rewriting them are not affected. This issue is fixed in version 0.15.0.
Timeline
- CVE published
- First seen by cve.now
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: total
- Record last updated
Affected versions
- langchain-ai langgraph-api
From 0.1.2 · fixed in 0.15.0
- langgraph-apiPyPI
From 0.1.2 · fixed in 0.15.0