<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: langbot</title><description>Every new CVE for langbot.</description><link>https://agentprime.io/</link><item><title>CVE-2026-112265: LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification</title><link>https://agentprime.io/advisories/CVE-2026-112265/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112265/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 19 Oct 2026 13:55:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90938: LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket</title><link>https://agentprime.io/advisories/CVE-2026-90938/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90938/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 14 Sep 2026 12:48:32 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-90562: LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key</title><link>https://agentprime.io/advisories/CVE-2026-90562/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-90562/</guid><description>CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 13 Sep 2026 10:45:36 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-28509: LangBot has a Cross Site Scripting(XSS) Vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-28509/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-28509/</guid><description>CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Mar 2026 04:16:58 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-59835: LangBot has a cross-directory file upload vulnerability, which could lead to system takeover</title><link>https://agentprime.io/advisories/CVE-2025-59835/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-59835/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 02 Oct 2025 18:59:42 GMT</pubDate><category>CVE</category></item></channel></rss>