CVE-2026-111704

Summary

LangChat has a critical authentication bypass vulnerability where unauthenticated users can access protected REST controllers and read plaintext passwords, LLM API keys, and create admin accounts. This allows full system compromise without any credentials.

Exploitability

Very easy to exploit with no preconditions - attackers simply need to access the vulnerable endpoints to gain full administrative access and data control.

Blast radius

High impact in real-world scenarios as attackers can steal sensitive API keys, create persistent admin accounts, and modify/delete all system data without detection.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Apply the fix from commit 2a6285a which registers the missing Sa-Token interceptor to secure REST controllers.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.