VYPR
← All advisories
High severityOSV Advisory· Published Oct 2, 2025· Updated Apr 15, 2026

CVE-2025-59835

CVE-2025-59835

Description

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the server, it is possible to upload dangerous files to specific system directories. This is fixed in version 4.3.5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apboard/LangbotOSV2 versions
    v4.1.0, v4.1.1, v4.1.2, …+ 1 more
    • (no CPE)range: v4.1.0, v4.1.1, v4.1.2, …
    • (no CPE)range: >=4.1.0, <4.3.5

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.