Advisories · Technology

LangBot.

Every CVE that names LangBot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-112265 CVE record

CVSS 8.3 High

LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification
- LangBot
- CWE-345
Not analysed yet 19 Oct 2026
CVE-2026-90938 CVE record

CVSS 8.8 High

LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket
- LangBot
- Authentication bypass
Not analysed yet 14 Sept 2026
CVE-2026-90562 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key
- LangBot
- CWE-331
Not analysed yet 13 Sept 2026
CVE-2026-28509 CVE record

CVSS 6.3 Medium

LangBot has a Cross Site Scripting(XSS) Vulnerability
- LangBot
- Cross-site scripting (XSS)
Not analysed yet 6 Mar 2026
CVE-2025-59835 CVE record

CVSS 8.6 High

LangBot has a cross-directory file upload vulnerability, which could lead to system takeover
- LangBot
- Path traversal
- Unrestricted file upload
Not analysed yet 2 Oct 2025