LangGraphPublished 23 Oct 2026NVD status: Received

CVE-2026-115885

The LangGraph CLI is the official command-line interface for LangGraph.

ComponentLangGraph (langgraph-cli)
Severitymedium (CVSS 4.1)
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published (NVD)2026-10-23
Affected versions
>= 0.4.15, < 0.4.32
read from the advisory text: no structured source gives these versions yet
Fixed in0.4.32
WeaknessCWE-532
CISA KEVnot listed

NVD description

The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who can read resulting CI logs or terminal recordings before the token's maximum 12-hour expiration can pull deployment images or push images to that deployment's image repository. Deployments without --verbose and remote image builds are not affected, and the token alone cannot update a deployment to execute a pushed image. This issue is fixed in version 0.4.32.

What to do

  • Upgrade LangGraph to 0.4.32 or later.
  • Do not expose the component's API or UI to the internet without authentication in front of it.

Sources