Skip to content
OpenAdvisories

Vendor

LangChat

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    LangChat through commit 2a6285a Missing Authentication on REST API Controllers

    LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered. Attackers can query /api/v1/auth/users to read plaintext pas…