Langchain-ai

    Dashboard / Vendors

    Products: 18
    Vulnerabilities: 50
    Known Exploited: 0
    7
    Critical Level Threats
    15
    High Level Threats
    19
    Medium Level Threats
    3
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-118668

    LangGraph JavaScript custom authentication may permit cross-user Store access

    Last Modified: Oct 30, 2026
    Published: Oct 28, 2026

    CVE-2026-118667

    LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requests

    Last Modified: Oct 30, 2026
    Published: Oct 28, 2026

    CVE-2026-115885

    LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

    Last Modified: Oct 29, 2026
    Published: Oct 23, 2026

    CVE-2026-115883

    LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

    Last Modified: Oct 26, 2026
    Published: Oct 23, 2026

    CVE-2026-106119

    LangChain: MongoDBChatMessageHistory query injection can allow cross-session access

    Last Modified: Oct 09, 2026
    Published: Oct 06, 2026
    Items Per Page
    Langchain-Ai Vulnerabilities & Security CVEs | CVE-DB