Rating certificate · AW/26-09/43126 Sept 2026
76of 100
The Register / Multi-agent frameworks / LangGraph
Register entry · Multi-agent frameworks · updated 26 Sept 2026
LangGraph
LangGraph models an agent or multi-agent system as a graph with explicit shared state, persisted by checkpointers so runs can pause for human approval and resume after failures. It is MIT-licensed, reached 1.0 in October 2025 alongside LangChain 1.0 (whose agents run on the LangGraph runtime), and shipped 1.1 in March and 1.2 in May 2026. LangChain sells hosting, tracing and evaluation through LangSmith (the managed deployment was formerly called LangGraph Platform).
What reviewers and users praise
- Explicit state, checkpoints and retries suit complex or long-running workflows (Langfuse, PromptQuorum reviews; several r/LangChain comments)
- Human approval steps and resume-after-failure are first-class (PromptQuorum; r/LLMDevs post)
What they criticise
- Steep learning curve and heavy abstraction; frequently called overkill for simple agents (PromptQuorum cons; r/LangChain and HN comments)
- Silent state bugs and hard-to-navigate graph state reported by users (r/LangChain, HN)
- Repeated CVEs in checkpoint serialisation and SQLite/Redis stores in 2025-2026 (all patched)
Experts vs the crowdneeds both scores
Experts—
Crowd43
| Price | Free, paid from $39 |
|---|---|
| Use it via | API, CLI |
| Runs on | macos, linux, windows |
| Licence | MIT |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Multi-agent frameworks: adoption 45%, experts 30%, crowd 25%. Pillars without enough evidence are left out and the others re-weighted. The method.
| Adoption & momentumweight 45% | 94 | GitHub stars 42k → 80 · npm weekly downloads 3.1M → 94 · PyPI monthly downloads 44M → 100 · 16 releases in 90 days → 100reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 30% | — | Only 2 independent reviews (3 needed) |
| Crowdcommunity sample · weight 25% | 43 | 15 dated posts from reddit, hackernews: 4 positive · 4 mixed · 7 negative (positive + ½ mixed) ÷ n, averaged toward 50 for small samples |
| Rating | 76 | Provisional: low confidence (2 of 3 pillars, 15 community posts). |
Evidence checks. 1 review from tool directories, AI-written pages or unnamed authors not counted. How evidence is checked.
Editorial adjustment. Incident-history re-grade under methodology revision 2 (see the trust section).
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: B.
C
Permission model
Nodes and tools execute automatically; pausing for human approval is opt-in via interrupt() or LangChain's HumanInTheLoopMiddleware. No sandbox is provided by the library. source
B
Data access scope
The graph reaches only the tools and stores the developer wires in, but these run with the host process's permissions; no framework-level allowlisting. source
A
Data storage
Library runs locally or self-hosted; state is kept in the checkpointer backend you choose (memory, SQLite, Postgres, Redis). LangSmith cloud hosting is optional; Enterprise offers self-hosted/hybrid. source
B
Data retention & training
Library itself sends nothing to LangChain. For the optional LangSmith platform the pricing page states 'LangSmith does not use your data to train models'; a retention period was not verified in this pass. source
C
Incident history (24 months)
Repeated serious advisories in 24 months, all patched: RCE via JsonPlusSerializer 'json' mode (CVE-2025-64439), SQL injection in SQLite checkpointer/store (CVE-2025-64104, CVE-2025-67644), BaseCache/msgpack/JSON deserialisation (CVE-2026-27794, CVE-2026-28277, CVE-2026-48775), SDK URL path issue (CVE-2026-48776), store namespace matching (CVE-2026-71433). The Hacker News (12 Jun 2026) described an SQLi + deserialisation chain to RCE in self-hosted deployments; LangSmith Deployment unaffected. Regraded from D: Revision 2: serious issues that were each fixed and publicly disclosed grade C; D is kept for unresolved issues or slow or undisclosed fixes. source
A
Compliance
LangChain docs state LangSmith holds SOC 2 Type II, HIPAA and GDPR (annual third-party audits); applies to the hosted LangSmith/Deployment offering, not the open-source library. source
A
Transparency
MIT-licensed source with public GitHub releases and published security advisories. source
The experts
2 named independent reviews found; dated reviews from the last 12 months are scored.
- positive
LangGraph fits teams building production agents that need explicit control over state, retries, or human approval — not every agent needs a graph.
Hans Kuepper, PromptQuorum · 5 Sept 2026 · promptquorum.com - positive
LangGraph remains the default for complex, stateful workflows where you need explicit control over every step.
Jannik, Langfuse · 13 Jul 2026 · langfuse.com
The crowd
15 coded posts from reddit, hackernews.
4 positive4 mixed7 negative
- negative
Agno runtime is faster in prod, comparison to LangGraph, also agno is quite easy to learn. LangGraph has a steep learning curve.
r/LangChain · 9 Sept 2026 · reddit.com - mixed
LangGraph is incredible for complex, multi-agent state, but honestly, if you just need structured outputs and a couple of basic tool calls, PydanticAI is so much cleaner.
r/LangChain · 4 Sept 2026 · reddit.com - mixed
langgraph is genuinely good at the agent-shaped part: state, branching, human approval, multi agent handoffs, retries that are still inside one run.
r/LangChain · 3 Sept 2026 · reddit.com - mixed
LangGraph is reliable as a runtime. The footgun is silent state bugs, not crashes.
r/LangChain · 28 Aug 2026 · reddit.com - negative
Then you use a workflow engine like Temporal. Not LangGraph (which is super bloated as a piece of software)
r/LangChain · 28 Jul 2026 · reddit.com - negative
People jaded Langgraph and langchain because is one of the worst frameworks you can work with. Extremely clunky and the documentation WAS ATROCIOUS
r/LangChain · 23 Jul 2026 · reddit.com - positive
its the only one where state genuinely survives failures and human approval steps feel native.
r/LLMDevs · 24 Jun 2026 · reddit.com - negative
LangGraph is just as bad. The whole Lang* ecosystem is a convoluted garbage dump written by amateurs.
r/LangChain · 26 May 2026 · reddit.com
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| LangGraph library | Free | MIT-licensed open source. |
| LangSmith Developer | Free | 1 seat, up to 5k base traces/month then pay-as-you-go. |
| LangSmith Plus | $39 / monthly | Per seat; 10k base traces/month; access to Deployment (one free small serverless deployment); compute billed in LCU ($1.50) and storage in LSU ($1.00). |
| LangSmith Enterprise | Custom | Custom; self-hosted and hybrid options, SSO/RBAC, support SLA. |
Recent changes
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.