CVE-2026-115885Published

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

Explicit identifiers and source references

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-115885 · Microsoft / collected KEV context

cve-program · CVE-2026-115885

https://github.com/langchain-ai/langgraph/security/advisories/GHSA-8prr-f582-jqq3
https://github.com/langchain-ai/langgraph/pull/8482
https://github.com/langchain-ai/langgraph/commit/1afaca35a0d4962fb0203a0e9133a07ffd6a553c
https://github.com/langchain-ai/langgraph/releases/tag/cli%3D%3D0.4.32.dev0

Related operational evidence

Explicit CVE identifiers

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output · Newly collected advisory · 23 Oct 2026