Skip to content
Threat Feed
Subscribe

Product

LangChat (<= 2a6285a)

1 brief RSS
critical advisory

Authentication Bypass in LangChat REST API

A missing Sa-Token interceptor in LangChat allows unauthenticated remote attackers to access sensitive REST controllers, leading to full system compromise and credential exfiltration.

LangChat authentication-bypass cve api-security
3t 1c