LangGraph JavaScript custom authentication may permit cross-user Store access

影響: pip:langgraph-api >= 0.1.2, < 0.15.0 → 0.15.0

LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an authorization handler. In affected deployments, an authenticated user may be able to access Store data outside their authorized namespace. Required conditions A deployment is affected only when all of the following conditions apply: - It uses an affected langgraph-api version. - It runs JavaScript or TypeScript custom authentication. - Its Store authorization h…

在 GitHub Advisory Database 阅读

2026/10/29 06:09，GitHub Advisory Database 发布了“LangGraph JavaScript custom authentication may permit cross-user Store access”（类型：漏洞公告）。严重程度为“高危”（high）。相关技术：Python、JavaScript / Node.js。CVE：CVE-2026-118668。