← Database

CVE-2026-28509

MEDIUM CVSS: 6.3 Published: 2026-03-06 Modified: 2026-06-17

Description

LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.

Affected Platforms

Langbot Langbot

Weakness Type

CWE-79

References