LangGraph JavaScript custom authentication may permit cross-user Store access

影響: pip:langgraph-api >= 0.1.2, < 0.15.0 → 0.15.0

LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affected langgraph-api version. - It runs JavaScript or TypeScript custom authentication. - Its Store authorization h…

GitHub Advisory Databaseで読む

2026/10/29 06:09、GitHub Advisory Databaseが「LangGraph JavaScript custom authentication may permit cross-user Store access」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: Python、JavaScript / Node.js。CVE: CVE-2026-118668。