LangGraph JS Store auth rewrite loss, CVE-2026-118668

Evidence record

Security advisory on authorization-rewritten namespaces being discarded across a Store runtime execution boundary.

Read the original source ↗

Claim-level citations (2)

• supportsLangGraph JS Store discarded an authorization-rewritten namespace: The LangGraph advisory limits the weakness to JavaScript/TypeScript custom-auth Store handlers that depend on namespace rewriting; version 0.15.0 carries the rewritten namespace into the executing Store request.

  GHSA-4hm6-w6qq-w73v: JS/TS auth rewriting, request execution mismatch, fixes

• supportsLangGraph JS Store discarded an authorization-rewritten namespace: LangGraph JS and TypeScript custom authorization handlers could rewrite a Store namespace to the signed-in user but later server execution used the original untrusted namespace. The flaw required an application relying on a rewrite-style custom auth handler; rejecting unauthorized operations outright and the Python implementation followed different paths. Store read, search, write or delete could cross the intended user namespace even though the handler appeared to scope the request.

  GHSA-4hm6-w6qq-w73v: JS/TS auth rewriting, request execution mismatch, fixes