MEDIUM 5.9 GitHub
CVE-2026-55236
langgraph-api: Incomplete assistant authorization in LangGraph Server run creation
## Summary
In affected versions of `langgraph-api` (the LangGraph Server runtime), the run-creation path authorized the assistant attached to a run using a different authorization event than the rest of the assistant-handling code paths. Direct assistant reads and cron creation dispatch the `assistants.read` authorization event; run creation dispatched `assistants.search` with an incomplete value. In deployments whose custom authorization handlers register only an `assistants.read` handler (wit
Affected Products
- pip/langgraph-api < 0.10.0
References
- https://github.com/advisories/GHSA-jfj5-wrj9-63x4
- https://github.com/langchain-ai/helm/security/advisories/GHSA-jfj5-wrj9-63x4
- https://github.com/advisories/GHSA-jfj5-wrj9-63x4
This medium severity vulnerability with a CVSS score of 5.9 was published on 2026-08-19 via GitHub. Affected: pip/langgraph-api < 0.10.0.
vulnfeed aggregates 11644 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.