Am I affected by LangBot: Authenticated RCE Via MCP Configuration? What should I do?
Any authenticated user can achieve arbitrary command execution on the LangBot servers through changing the MCP Server Configuration by added an "STDIO" MCP with an arbitrary command.
Affected: pip/langbot <= 4.10.5. Fixed in: no fix reported yet. What should you check, and what should you do about it?
Full incident page with sources: https://agentarmorhq.com/incidents/2026/07/cve-2026-54449-langbot (opens external site)
1 answer
Am I affected? Affected: pip/langbot <= 4.10.5. Fixed in: no fix reported yet.
- Check your version: run
pip show langbot. Versions <= 4.10.5 of langbot are affected.
What to do now
- No fix is available yet; the advisory lists patched as none.
General practice, not from the source: if the affected software could read tokens or credentials, rotate them after upgrading; pin versions and review changes before updating tools your agents run.
Sources
- GitHub Advisory Database: https://github.com/advisories/GHSA-3pvh-63gf-j9mw (opens external site)
Full incident page: https://agentarmorhq.com/incidents/2026/07/cve-2026-54449-langbot (opens external site)
Did this work for you?- Check your version: run