CVE-2026-55235

langgraph-api implements the LangGraph API for rapid development and testing. Prior to 0.10.0, langgraph-api permits a run or cron to specify a relative webhook target that is delivered through an in-process loopback transport, and the authentication middleware treats that transport as internal without applying the authentication context used for external requests. In deployments that rely on per-user authorization to separate threads and runs, an authenticated user can direct a webhook to the server's own thread and run routes, allowing creation of a run on or modification of another user's thread and limited incorporation of the targeted thread's metadata into the created run record. The affected path requires webhook targets and per-user authorization boundaries; deployments that deliberately re-enable loopback delivery should restrict it to controlled same-process routes because those webhooks remain unauthenticated. This issue is fixed in version 0.10.0.

• CWE-287

• https://github.com/langchain-ai/docs/blob/7b70fbacab21f84d9c6f9848f86cdeb471adbb50/src/langsmith/agent-server-changelog.mdx
• https://github.com/langchain-ai/helm/security/advisories/GHSA-2c9q-c2q9-qgqv

Published

Sep 14, 2026

Last Modified

Sep 16, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55227Weblate is a web-based localization tool. In versions prior …4.3
• CVE-2026-55228Weblate is a web-based continuous localization platform used…8.1
• CVE-2026-55229Gotenberg is a Docker-powered stateless API for PDF files. P…7.5
• CVE-2026-5523The Divi Form Builder plugin for WordPress is vulnerable to …8.8
• CVE-2026-55233OpenResty is a high performance web platform. From 1.29.2.1 …7.5
• CVE-2026-55234Wekan is open source kanban built with Meteor. Prior to 9.37…8.5
• CVE-2026-55236langgraph-api implements the LangGraph API for rapid develop…5.9
• CVE-2026-55237AutoGPT is a workflow automation platform for creating, depl…8.8
• CVE-2026-55238xrdp is an open source RDP server. Versions 0.10.6 and prior…5.3
• CVE-2026-5524The Divi Form Builder plugin for WordPress is vulnerable to …9.8
• CVE-2026-55241Checkmate is an open-source, self-hosted tool designed to tr…7.5
• CVE-2026-55242ERPNext is a free and open source Enterprise Resource Planni…8.8