The LangGraph command‑line interface exposes a temporary registry push token when the verbose flag is used during deployment. The token is written to stdout in the verbose output, making it visible in CI logs and terminal recordings. If an attacker gains read access to these logs before the 12‑hour token expiration, they can authenticate to Docker registries to pull deployment images or push custom images to the deployment repository. The vulnerability does not allow direct deployment changes, but it enables potential supply‑chain attacks by inserting malicious container images.

The flaw exists in the langchain‑ai langgraph command‑line client from version 0.4.15 through 0.4.32 inclusive. Version 0.4.32.dev0 and later contain a patch that removes the token from the verbose output.

With a CVSS score of 4.1 the risk is moderate. Exploitation requires access to CI logs or a terminal session where the verbose command output is captured, and the token must be used within its 12‑hour validity window. The vulnerability is not listed in the CISA KEV catalog and the EPSS score is not available, indicating limited publicly known exploitation activity.