Skip to content
OpenAdvisories

Package · PyPI

langbot

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-54449

    LangBot: Authenticated RCE Via MCP Configuration

    LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, Stdi…

    langbot-app LangBot langbot PyPI