What is the CVSS score of CVE-2026-48776?

CVE-2026-48776 has a contested CVSS base score of 9.1 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Python are affected by CVE-2026-48776?

LangGraph SDK (versions 0.3.14 and earlier) contains a critical authorization bypass vulnerability enabling unauthorized access to or modification of protected resources.. A patch is available.

How to fix or mitigate CVE-2026-48776?

24 hours: Identify all systems running langgraph-sdk version 0.3.14 or earlier and assess applications that process untrusted identifiers. 7 days: Upgrade langgraph-sdk to the latest patched version across all development and production environments; validate application functionality post-upgrade. 30 days: Audit identifier handling practices in applications using LangGraph SDK; implement input validation and monitoring for suspicious resource access patterns.

Python CVE-2026-48776

EUVD-2026-37289 CRITICAL

Path Traversal (CWE-22)

2026-06-16 GitHub_M

GHSA-w39p-vh2g-g8g5

Python Path Traversal Red Hat Langchain Ai Langchain Sdk

Critical

Disputed · 9.1 NVD

Severity by source

Sources disagree (Medium–Critical)

Vendor (GitHub_M) PRIMARY

MEDIUM

qualitative

NVD

9.1 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

vuln.today AI

6.8 MEDIUM

AC:H because exploitation needs a non-default config (unvalidated IDs plus URL-prefix upstream authz); PR:L since the attacker is typically an authenticated/untrusted end user supplying identifiers; C:H/I:H for cross-scope read and modify/delete, A:N.

3.1 AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

4.0 AV:N/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Red Hat

6.0 MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

Lifecycle Timeline

Analysis Updated

Jun 26, 2026 - 15:43 vuln.today

v3 (cvss_changed)

Analysis Updated

Jun 26, 2026 - 15:43 vuln.today

v2 (cvss_changed)

Re-analysis Queued

Jun 26, 2026 - 15:37 vuln.today

cvss_changed

Severity Changed

Jun 26, 2026 - 15:37 NVD

MEDIUM CRITICAL

CVSS changed

Jun 26, 2026 - 15:37 NVD

4.2 (MEDIUM) 9.1 (CRITICAL)

Source Code Evidence Fetched

Jun 17, 2026 - 00:20 vuln.today

Analysis Generated

Jun 17, 2026 - 00:20 vuln.today

Patch available

Jun 16, 2026 - 22:02 EUVD

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

168 pypi packages depend on langgraph-sdk (8 direct, 161 indirect)

Ecosystem-wide dependent count for version 0.3.15.

DescriptionNVD

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource operations. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to address a different resource (and potentially a different resource type) than the SDK method's call site indicates. In deployments where the SDK receives identifier values that originate from untrusted sources, this could result in unintended access, modification, or deletion of resources beyond the calling user's authorization scope. This issue is most consequential in deployments that forward end-user-supplied values directly into SDK identifier parameters without first validating them against an expected format (such as a UUID), and rely on URL-prefix-based authorization at an upstream layer (reverse proxy, edge gateway, WAF), where the authorization decision is made on the SDK call's intended path rather than on the final delivered request path. The issue has been fixed in version 0.3.15.

AnalysisAI

Path manipulation in the LangGraph Python SDK (langgraph-sdk) version 0.3.14 and earlier lets caller-supplied identifier values containing URL-special characters redirect an HTTP request to a different resource — or resource type — than the SDK call intended. When applications forward untrusted, unvalidated identifiers into SDK methods and rely on upstream URL-prefix authorization, an attacker can reach, modify, or delete resources outside their authorization scope. There is no public exploit identified at time of analysis and EPSS is low (0.22%), but CVSS is rated 9.1 due to high confidentiality and integrity impact.