Login Request a demo
LA
Product
LangBot
by langbot-app · last CVE Oct 19, 2026
6
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities6Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add LangBot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54449
8.8
1%
Aug 20
LangBot: Authenticated RCE Via MCP Configuration
Affected: <= 4.10.7
CVE-2026-90938
8.6
1%
Sep 14
LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket
Affected: through 0.4.17
CVE-2025-59835
8.6
0%
Oct 2
LangBot has a cross-directory file upload vulnerability, which could lead to system takeover
Affected: >= 4.1.0, < 4.3.5
CVE-2026-90562
8.1
1%
Sep 13
LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key
Affected: 4.0.8.1 before 4.10.11
CVE-2026-112265
6.5
0%
Oct 19
LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification
Affected: through 4.11.0
CVE-2026-28509
5.4
0%
Mar 6
LangBot has a Cross Site Scripting(XSS) Vulnerability
Affected: < 4.8.7
Showing 6