Llangbot-app

Products

Exploited and recent CVEs

• CVE-2026-112265 Medium 6.5 LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification 0.2%
• CVE-2026-90938 High 8.6 LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket 0.6%
• CVE-2026-90562 High 8.1 LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key 0.7%
• CVE-2026-54449 High 8.8 LangBot: Authenticated RCE Via MCP Configuration 0.7%
• CVE-2026-28509 Medium 6.3 LangBot has a Cross Site Scripting(XSS) Vulnerability 0.2%
• CVE-2025-59835 High 8.6 LangBot has a cross-directory file upload vulnerability, which could lead to system takeover 0.4%