Security Advisory

CVE-2026-28509

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-03-06 04:16:58

Last updated 2026-03-06 16:07:49

Assigner GitHub_M

CVSS score 6.3

State PUBLISHED

Description

LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, LangBot’s web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) vulnerability. This issue has been patched in version 4.8.7.

← Browse all CVEs View on cve.org ↗