langbot-app LangBot
2 known vulnerabilities in langbot-app LangBot, 1 critical, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-90938 CVSS 8.8 high LangBot's plugin runtime (pip package langbot_plugin) through 0.4.17 starts a debug WebSocket server on 0.0.0.0:5401 (/plugin/ws) whose…
- CVE-2026-90562 CVSS 9.2 critical LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated…