CVE-2026-118668

Name of the Vulnerable Software and Affected Versions langgraph-api versions 0.1.2 through 0.14.9

Description In deployments using JavaScript or TypeScript custom authentication, the system may fail to apply Store authorization changes returned by an authorization handler. This occurs when the handler returns a rewritten namespace that is not carried across the runtime boundary before the Store operation. Consequently, an authenticated user can access another user's Store namespace, enabling unauthorized reads, overwrites, searches, or deletions of data. This issue specifically affects deployments that rely on namespace rewriting for isolation; handlers that reject unauthorized namespaces instead of rewriting them are not affected. Python custom authentication handlers are also not affected.

Recommendations Update to version 0.15.0 or later. As a temporary workaround, change JavaScript or TypeScript Store authorization handlers to reject requests for unauthorized namespaces instead of relying on namespace rewriting for every Store action exposed by the deployment.