Langbot · Langbot · CVE-2026-28509
**Name of the Vulnerable Software and Affected Versions**
LangBot versions prior to 4.8.7
**Description**
LangBot is a global IM bot platform designed for LLMs. Prior to version 4.8.7, the web UI renders user-supplied raw HTML using rehypeRaw, which can lead to a cross-site scripting (XSS) issue.
**Recommendations**
Update to version 4.8.7 or later.