Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
  • Support the projectPage
langbot-app

langbot-app LangBot vulnerabilities

6 published CVEs name langbot-app LangBot among the affected products.

Newest CVEs

  • CVE-2026-112265

    LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification

    langbot-app · LangBot

    High8.3
  • CVE-2026-90938

    LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket

    langbot-app · LangBot

    High8.8
  • CVE-2026-90562

    LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key

    langbot-app · LangBot

    Critical9.2
  • CVE-2026-54449

    LangBot: Authenticated RCE Via MCP Configuration

    langbot-app · LangBot

    High8.8
  • CVE-2026-28509

    LangBot has a Cross Site Scripting(XSS) Vulnerability

    langbot-app · LangBot

    Medium6.3
  • CVE-2025-59835

    LangBot has a cross-directory file upload vulnerability, which could lead to system takeover

    langbot-app · LangBot

    High8.6