Langbot-app vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Langbot-app products: 1 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-28509 Medium · 5.4 CWE-79 Mar 6, 2026

LangBot has a Cross Site Scripting(XSS) Vulnerability

LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.