---
id: CVE-2026-118667
title: >-
  LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect
  authenticated GET requests
summary: >-
  LangGraph Python SDK is used to connect to running LangGraph API servers,
  manage assistants, threads and stream runs from Python applications. From
  langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when
  RemoteGraph v…
severity: medium
cvss: 4.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-22
vendor: langchain-ai
product: langgraph
affected:
  - 'langgraph >= 1.2.3, < 1.2.14'
  - 'langgraph-sdk >= 0.4.0, < 0.4.6'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-10-29T18:25:51.378346Z'
published: '2026-10-28'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T18:26:03.178Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-118667'
references:
  - url: >-
      https://github.com/langchain-ai/langgraph/security/advisories/GHSA-3fx2-cqw9-xr3c
    label: >-
      https://github.com/langchain-ai/langgraph/security/advisories/GHSA-3fx2-cqw9-xr3c
  - url: 'https://github.com/langchain-ai/langgraph/pull/9213'
    label: 'https://github.com/langchain-ai/langgraph/pull/9213'
  - url: >-
      https://github.com/langchain-ai/langgraph/commit/d89c7e100ec6fc1512544d23b0a7c5169699ef3e
    label: >-
      https://github.com/langchain-ai/langgraph/commit/d89c7e100ec6fc1512544d23b0a7c5169699ef3e
  - url: 'https://github.com/langchain-ai/langgraph/releases/tag/1.2.14'
    label: 'https://github.com/langchain-ai/langgraph/releases/tag/1.2.14'
  - url: 'https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.4.6'
    label: 'https://github.com/langchain-ai/langgraph/releases/tag/sdk%3D%3D0.4.6'
  - url: 'https://github.com/advisories/GHSA-3fx2-cqw9-xr3c'
  - url: 'https://github.com/langchain-ai/langgraph'
tags:
  - cve.org
  - ghsa
  - pip
  - osv
aliases:
  - GHSA-3fx2-cqw9-xr3c
ecosystem: pip
patched:
  - langgraph-sdk 0.4.6
  - langgraph 1.2.14
epss: 0.00394
epssPercentile: 0.33618
ingestedAt: '2026-10-28T21:18:49.945Z'
---

## Overview

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From langgraph-sdk 0.4.0 until 0.4.6, and from langgraph 1.2.3 until 1.2.14 when RemoteGraph v3 streaming uses an affected langgraph-sdk version, the synchronous and asynchronous v3 stream get_tree and _fetch_state helpers interpolate caller-controlled assistant_id and thread_id values into authenticated GET request paths without using _quote_path_param. Relative path segments can therefore be normalized into another readable path on the configured server while retaining authentication headers. This issue is fixed in langgraph-sdk 0.4.6 and langgraph 1.2.14.

## Affected

- `langgraph >= 1.2.3, < 1.2.14`
- `langgraph-sdk >= 0.4.0, < 0.4.6`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Package advisory (CVE-2026-118667)

Affected packages:

- `langgraph-sdk >= 0.4.0, < 0.4.6`
- `langgraph >= 1.2.3, < 1.2.14`

Patched in:

- `langgraph-sdk 0.4.6`
- `langgraph 1.2.14`

Source: https://github.com/advisories/GHSA-3fx2-cqw9-xr3c