{"id":"ghsa-ghsa-3fx2-cqw9-xr3c","seq":2056962,"kind":"advisory","title":"LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests","url":"https://github.com/advisories/GHSA-3fx2-cqw9-xr3c","permalink":"https://vulnpulse.app/items/ghsa-ghsa-3fx2-cqw9-xr3c","summary":"影響: pip:langgraph-sdk >= 0.4.0, < 0.4.6 → 0.4.6, pip:langgraph >= 1.2.3, < 1.2.14 → 1.2.14\nThe LangGraph Python SDK v3 streaming client interpolates caller-supplied thread_id and assistant_id values into request paths without encoding them at four synchronous and asynchronous call sites. Relative path segments can therefore redirect an authenticated GET request to another path on the same configured server. Details The affected get_tree and _fetch_state implementations build request paths from raw identifiers rather than passing each identifier through the SDK's existing _quote_path_…","severity":"medium","techs":["python"],"cves":["CVE-2026-118667"],"tags":["GHSA-3fx2-cqw9-xr3c","langgraph-sdk","langgraph"],"source":{"id":"ghsa","name":"GitHub Advisory Database"},"published_at":"2026-10-28T21:05:47.000Z","fetched_at":"2026-10-29T00:48:52.653Z"}