Langbot-app vulnerabilities
We track 4 vulnerabilities in Langbot-app products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 14, 2026.
Latest Langbot-app vulnerabilities
- 8.6 High severity
LangBot: Missing Authentication for Critical Functionality
LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 (/plugin/ws) whose authentication is gated on plugin_debug_key, which defaults to an empty string and is never set by the upstream repository,
- 8.1 High severity
LangBot: Insufficient Entropy
LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent reque
- 8.8 High severity
LangBot: Improper Neutralization of Special Elements used in a Command
LangBot is a global IM bot platform designed for LLMs. In version 4.10.7 and earlier, any authenticated user can add or change an STDIO MCP server configuration without an adequate authorization boundary. In src/langbot/pkg/provider/tools/loaders/mcp.py, Stdio
- 8.6 High severity
LangBot: Relative Path Traversal
LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict th