Review reviewCritical

CVE-2026-48776

langchain-ai langchain-ai, langchain-sdk, langgraph-sdk

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource operations. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to address a different resource (and potentially a different resource type) than the SDK method's call site indicates. In deployments where the SD...

CVSS: 9.1
EPSS: 0.22%
CISA KEV: Not listed
Published: 2026.06.17

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.22%

Technical severityCVSS 9.1

Vulnerability overview

Affected product and versions

Product: langchain-ai langchain-ai, langchain-sdk, langgraph-sdk
Affected versions: < 1.2.1, < 0.3.15
Fixed versions: 0.3.15

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that langchain-ai langchain-ai, langchain-sdk, langgraph-sdk and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CWE: CWE-22, CWE-863