Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:langchat:langchat:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Authentication Bypass in LangChat REST API

A missing Sa-Token interceptor in LangChat allows unauthenticated remote attackers to access sensitive REST controllers, leading to full system compromise and credential exfiltration.

LangChat authentication-bypass cve api-security
3t 1c