Langgraph-Api
Langchain-AI · 2 CVEs
CVE-2026-55235
MEDIUM
langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication
Sep 14, 2026
CVE-2026-55236
MEDIUM
langgraph-api: Incomplete assistant authorization in LangGraph Server run creation
Sep 14, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-55235 | langgraph-api: Relative webhook targets in LangGraph Server can reach in-process routes without authentication | MEDIUM | 0.36% | Sep 14, 2026 |
| CVE-2026-55236 | langgraph-api: Incomplete assistant authorization in LangGraph Server run creation | MEDIUM | 0.26% | Sep 14, 2026 |
Showing 1 to 2 of 2 CVEs