CVE-2026-115885— LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
Quick assessment
Affected
langchain-ai langgraph
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
LangGraph CLI 是 LangGraph 的官方命令行接口。在版本 0.4.15 至 0.4.32 期间，执行 时，会将临时的注册表推送令牌通过标准输入传递给 ；然而，CLI 的 subprocess 辅助程序在详细（verbose）模式下会打印命令输入内容。任何能够读取由此产生的持续集成（CI）日志或终端录制文件的人，只要在该令牌最长 12 小时的有效期内，即可拉取部署镜像或将镜像推送到该部署的镜像仓库。未使用 选项的部署以及远程镜像构建不受此问题影响；此外，仅凭该令牌本身无法更新部署以执行被推送的镜像
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-115885
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
Source: CVE Program / CVE List V5
Vulnerability Description
The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subprocess helper prints command input in verbose mode. Anyone who can read resulting CI logs or terminal recordings before the token's maximum 12-hour expiration can pull deployment images or push images to that deployment's image repository. Deployments without --verbose and remote image builds are not affected, and the token alone cannot update a deployment to execute a pushed image. This issue is fixed in version 0.4.32.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过日志文件的信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| langchain-ai | langgraph | >= 0.4.15, < 0.4.32 | - |
|
II. Public POCs for CVE-2026-115885
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-115885
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-115885 (1)
Vendor Advisories for CVE-2026-115885 (1)
Vendor Pages for CVE-2026-115885 (1)
IV. Related Vulnerabilities
Same product: langgraph
-
CVE-2026-115883
LangGraph: Namespace labels containing `.` reach other names -
CVE-2026-104873
LangGraph SDK custom auth silently ignores actions= on resou -
CVE-2026-71433
LangGraph: Namespace prefix matching crosses segment boundar -
CVE-2026-14742
langchain-ai langgraph Task Result Cache _cache.py _freeze w -
CVE-2026-48775
LangGraph Checkpoint: Unsafe JSON deserialization in checkpo
Same vendor: langchain-ai
-
CVE-2026-115883
LangGraph: Namespace labels containing `.` reach other names -
CVE-2026-106119
LangChain: MongoDBChatMessageHistory query injection can all -
CVE-2026-105799
LangChain: RediSearch Filter Injection via Unescaped Tag/Tex -
CVE-2026-104873
LangGraph SDK custom auth silently ignores actions= on resou -
CVE-2026-55253
LangChain MongoDB: NoSQL Operator Injection in MongoDBSaver.
Same weakness: CWE-532
-
CVE-2026-54711
PGHoard: Password written to debug log -
CVE-2026-105963
Secret key base exposed in stack trace arguments on wrong-ty -
CVE-2026-115657
KNIME Analytics Platform logs credentials of configured prox -
CVE-2026-115358
OpenBao before 2.6.3 Sensitive Data Leak in Audit Log via Ma -
CVE-2026-16648
Mailer Plus Log - Moderately critical - Access bypass - SA-C
V. Comments for CVE-2026-115885
No comments yet