pypi langgraph-cli vulnerabilities

Latest pypi langgraph-cli CVEs

Newest publication first

1. CVE-2026-115885 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

   Published 2026-10-23

   Medium·CVSS 4.1 EPSS 0.11%

   The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mo...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.