CLAIM-2026-09-24-03

The same substitution is reproduced across twelve tested versions of a conditional in-memory LangGraph Agent Server composition from 0.7.5 to 0.14.0, and the result is conditional on an authorization policy that permits a non-approver to update a shared pending thread; a deny-update policy blocks the mutation while preserving legitimate execution.

Why it matters

The control is a deployment's own authorization policy rather than a version number, so upgrading does not resolve it and the fix is available today without waiting for a vendor.

Sources

• arxiv2026loopjacki
• github2026loopjacki