Live › vulnerability › CVE-2026-112265
Go to dashboardLangBot through 4.11.0 skips signature verification on incoming Lark/Feishu webhook events. An attacker who knows a bot UUID can POST forged message and card-action events that run the LLM pipeline, tools and approvals as other users.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Self-hosted LangBot 4.11.0 or earlier with a Lark/Feishu bot in Webhook Mode on a reachable URL. Anyone who learns the bot UUID in the URL can send fake messages or card-button clicks as any user, and the bot's LLM pipeline, tools and approval buttons act on them. Teams using WebSocket mode, other chat platforms, or a webhook that is not reachable from the internet can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| LangBot | pypi | <= 4.11.0 | 4.11.1 |
4.11.1 or later (current 4.11.3)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
LangBot through 4.11.0 contains a missing authenticity verification vulnerability that allows unauthenticated attackers to inject forged Lark/Feishu events by skipping signature checks. Attackers knowing a bot UUID can POST fabricated im.message.receive_v1 or card.action.trigger events to drive the LLM pipeline, tools, and approvals as other users.
This page as .md · .json · in your agent: get_signal("CVE-2026-112265")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.