TI-2026-75490 CVE-2026-111704 · GHSA-hgqj-chvw-c4p5
LangChat REST API Controllers Missing Authentication
Priority HIGH 81
LangChat through commit 2a6285a contains a missing authentication vulnerability that allows unauthenticated remote attackers to access REST controllers because no Sa-Token interceptor is registered.