LA
Vendor
langbot-app
6
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-112265 | LA LangBot langbot-app | 6.5 | Oct 19 | LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification |
| CVE-2026-90938 | LA LangBot langbot-app | 8.6 | Sep 14 | LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket |
| CVE-2026-90562 | LA LangBot langbot-app | 8.1 | Sep 13 | LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key |
| CVE-2026-54449 | LA LangBot langbot-app | 8.8 | Aug 20 | LangBot: Authenticated RCE Via MCP Configuration |
| CVE-2026-28509 | LA LangBot langbot-app | 5.4 | Mar 6 | LangBot has a Cross Site Scripting(XSS) Vulnerability |
| CVE-2025-59835 | LA LangBot langbot-app | 8.6 | Oct 2 | LangBot has a cross-directory file upload vulnerability, which could lead to system takeover |