CVE-2023-2887: Cbot Core

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Authentication Bypass by Spoofing vulnerability in CBOT Chatbot allows Authentication Bypass. This issue affects Chatbot: before Core: v4.0.3.4 Panel: v4.0.3.7.

Affected products

• Cbot Cbot Core: before 4.0.3.4 (fixed in 4.0.3.4)
• Cbot Cbot Panel: before 4.0.3.7 (fixed in 4.0.3.7)

Published 2023-05-25. Last modified 2026-06-17.