Langgraph Api
Monthly
Cross-user Store access in LangGraph API (pip package langgraph-api) versions 0.1.2 through 0.14.x lets an ordinary authenticated user read, overwrite, search or delete Store data belonging to another user. The flaw only manifests in deployments running JavaScript or TypeScript custom authentication whose Store authorization handler restricts users by rewriting the requested namespace: the rewritten namespace is not carried across the runtime boundary and applied before the Store operation, so the original (attacker-supplied) namespace is used instead (CWE-639). Python custom authentication and JS/TS handlers that reject unauthorized namespaces rather than rewriting them are unaffected; vendor CVSS 4.0 scores it 8.6 High and the issue is fixed in 0.15.0, with no public exploit identified at time of analysis.
Cross-user Store access in LangGraph API (pip package langgraph-api) versions 0.1.2 through 0.14.x lets an ordinary authenticated user read, overwrite, search or delete Store data belonging to another user. The flaw only manifests in deployments running JavaScript or TypeScript custom authentication whose Store authorization handler restricts users by rewriting the requested namespace: the rewritten namespace is not carried across the runtime boundary and applied before the Store operation, so the original (attacker-supplied) namespace is used instead (CWE-639). Python custom authentication and JS/TS handlers that reject unauthorized namespaces rather than rewriting them are unaffected; vendor CVSS 4.0 scores it 8.6 High and the issue is fixed in 0.15.0, with no public exploit identified at time of analysis.