{"schema":"threatline.record/2","record":{"id":"CVE-2026-118667","aliases":["GHSA-3fx2-cqw9-xr3c"],"summary":"LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests","details":"LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the synchronous and asynchronous v3 stream get_tree and _fetch_state helpers interpolate caller-controlled assistant_id and thread_id values into authenticated GET request paths without using _quote_path_param. Relative path segments can therefore be normalized into another readable path on the configured server while retaining authentication headers. This issue is fixed in langgraph-sdk 0.4.6 and langgraph 1.2.14.","categories":["Unclassified"],"product":"langgraph","vendor":"langchain-ai","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-118667","source_modified_at":"2026-10-28T20:51:46.657Z","fetched_at":"2026-10-28T20:58:01.013507Z","product":"langgraph","vendor":"langchain-ai","versions":[{"version":">= 1.2.3, < 1.2.14","status":"affected"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-118667","source_modified_at":"2026-10-28T20:51:46.657Z","fetched_at":"2026-10-28T20:58:01.013507Z","product":"langgraph-sdk","vendor":"langchain-ai","versions":[{"version":">= 0.4.0, < 0.4.6","status":"affected"}],"defaultStatus":null}],"fixed_versions":[],"cvss":4.3,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T20:51:46.657Z","modified_at":"2026-10-28T20:51:46.657Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-118667","fetched_at":"2026-10-28T20:58:01.013507Z","source_modified_at":"2026-10-28T20:51:46.657Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/langchain-ai/langgraph/security/advisories/GHSA-3fx2-cqw9-xr3c","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://github.com/langchain-ai/langgraph/pull/9213","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/langchain-ai/langgraph/commit/d89c7e100ec6fc1512544d23b0a7c5169699ef3e","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/langchain-ai/langgraph/releases/tag/1.2.14","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.4.6","tags":["x_refsource_MISC"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-28T20:51:46.657Z","content_hash":"b8132aa3f33764abcc0e460aadee33998fd32beb3aedb03a30006625d60e90e3"}}