LangGraph JavaScript custom authentication may permit cross-user Store access

影響: pip:langgraph-api >= 0.1.2, < 0.15.0 → 0.15.0

LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affected langgraph-api version. - It runs JavaScript or TypeScript custom authentication. - Its Store authorization h…

Read on GitHub Advisory Database

On 10/29/2026, 06:09 AM, GitHub Advisory Database published "LangGraph JavaScript custom authentication may permit cross-user Store access" (type: Advisory). Severity is "High" (high). Related technologies: Python, JavaScript / Node.js. CVE: CVE-2026-118668.