The langgraph Python SDK uses resource-scoped authorization decorators (@auth.on.threads, @auth.on.assistants, and @auth.on.crons) to control access to resources. Between versions 0.1.45 and 0.4.4, these decorators ignore the 'actions' argument and register the handler for all actions on the resource. Because this wildcard handler is selected before broader fallback handlers, an authenticated user can bypass fallback action, ownership, or permission checks, leading to unauthorized access to other users' resources. Deployments remain protected if the selected handler enforces all required checks independently. The issue is resolved in version 0.4.4.

An authenticated user with limited privileges may bypass intended authorization controls and perform unauthorized read, update, or delete operations on resources owned by other users. This can lead to unauthorized data access and modification within affected deployments using the vulnerable decorators without additional enforcement.

Upgrade langgraph SDK to version 0.4.4 or later, where this authorization issue is fixed. Deployments that do not use the affected decorators or that enforce all required permission checks within the selected handlers are not vulnerable. No other mitigation is specified.