Skip to content
OpenAdvisories

Vendor

langbot-app

6 known vulnerabilities.

Products

LangBot 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-112265

    LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification

    LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to inject forged Lark/Feishu events by skipping signature checks. Attackers knowing a bot UUID can POST fabricated im.message.receive_v1 or…

    langbot-app LangBot
  • Medium 6.3
    CVE-2026-28509

    LangBot has a Cross Site Scripting(XSS) Vulnerability

    LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.

    langbot-app LangBot