LangGraph JavaScript custom authentication may permit cross-user Store access

影響: pip:langgraph-api >= 0.1.2, < 0.15.0 → 0.15.0

LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affected langgraph-api version. - It runs JavaScript or TypeScript custom authentication. - Its Store authorization h…

GitHub Advisory Database에서 읽기

2026. 10. 29. 오전 06:09, GitHub Advisory Database에서 "LangGraph JavaScript custom authentication may permit cross-user Store access"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "높음"(high)입니다. 관련 기술: Python, JavaScript / Node.js. CVE: CVE-2026-118668.