Is CVE-2026-115885 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-115885 being exploited in the wild.

How severe is CVE-2026-115885?

Medium severity, with a CVSS score of 5.4, published 23 October 2026.

Which products and versions are affected?

LangChain LangGraph CLI 0.4.15 to 0.4.31; langgraph-cli (PyPI) >= 0.4.15, <= 0.4.31, ECOSYSTEM:introduced=0.4.15,fixed=0.4.32.

How is CVE-2026-115885 attacked?

It is attacked with local access or from the adjacent network.

Am I affected by CVE-2026-115885?

Check whether you run LangChain LangGraph CLI or langgraph-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-115885: LangGraph CLI credential exposure in verbose mode

Q: Is there a fix for CVE-2026-115885?

Yes. langgraph-cli (PyPI): upgrade to 0.4.32 or later. Until then: Avoid using the `--verbose` flag during deployment commands in CI/CD environments where logs may be retained or accessible to unauthorized users, or upgrade to version 0.4.32 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

Q: How is CVE-2026-115885 attacked?

It is attacked with local access or from the adjacent network.

Q: Am I affected by CVE-2026-115885?

Check whether you run LangChain LangGraph CLI or langgraph-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-115885 · Severity: medium · CVSS 5.4 · Published 2026-10-23

LangGraph CLI is a command-line tool for deploying LangGraph applications. When using the `--verbose` flag during deployment, temporary registry authentication tokens are exposed in logs or terminal recordings, allowing anyone with access to those logs to pull or push Docker images to the deployment registry before the token expires in 12 hours. This could lead to unauthorized image manipulation or deployment tampering.

Vendors: LangChain, PyPI.

Quick answers

Is CVE-2026-115885 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-115885 being exploited in the wild.
How severe is CVE-2026-115885?: Medium severity, with a CVSS score of 5.4, published 23 October 2026.
Which products and versions are affected?: LangChain LangGraph CLI 0.4.15 to 0.4.31; langgraph-cli (PyPI) >= 0.4.15, <= 0.4.31, ECOSYSTEM:introduced=0.4.15,fixed=0.4.32.
Is there a fix for CVE-2026-115885?: Yes. langgraph-cli (PyPI): upgrade to 0.4.32 or later. Until then: Avoid using the `--verbose` flag during deployment commands in CI/CD environments where logs may be retained or accessible to unauthorized users, or upgrade to version 0.4.32 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-115885 attacked?: It is attacked with local access or from the adjacent network.
Am I affected by CVE-2026-115885?: Check whether you run LangChain LangGraph CLI or langgraph-cli (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

langgraph-cli (PyPI): upgrade to 0.4.32 or later
```
pip install "langgraph-cli>=0.4.32"
```

Avoid using the `--verbose` flag during deployment commands in CI/CD environments where logs may be retained or accessible to unauthorized users, or upgrade to version 0.4.32 or later.

Technical details

The vulnerability occurs in the `langgraph deploy --verbose` command, which passes a temporary registry push token to `docker login --password-stdin` but the CLI subprocess helper prints command input in verbose mode, exposing the token. The attack vector is local/adjacent (requires access to CI logs or terminal recordings), and the impact is limited by the token's 12-hour expiration and the additional requirement that the token alone cannot trigger deployment execution. The vulnerability is fixed in version 0.4.32.

Affected products

LangChain LangGraph CLI 0.4.15 to 0.4.31

Identifiers

CVE-2026-115885
GHSA-8prr-f582-jqq3

Timeline

2026-10-23: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.