AIKIDO-2026-447650

TL;DR

The langgraph-sdk custom authorization layer registers resource scoped handlers incorrectly. When the actions= parameter is passed to decorators @auth.on.threads, @auth.on.assistants, or @auth.on.crons, the handler is registered as a wildcard for every action on the resource instead of only the selected actions. Authenticated users can reach resource operations that the intended scope should have restricted, depending on how the handler is implemented. The fix validates action selectors, rejects invalid or duplicate registrations, and registers handlers only for the explicitly selected actions.