What’s Vulnerable › Products

chatchat-space Langchain-Chatchat vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your chatchat-space Langchain-Chatchat version is affected

Latest chatchat-space Langchain-Chatchat vulnerabilities

• CVE-2026-75128 — Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint (CVSS 9.8)
• CVE-2026-7847 — chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values (CVSS 2.6)
• CVE-2026-7846 — chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou (CVSS 2.6)
• CVE-2026-7845 — chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash (CVSS 2.6)
• CVE-2026-7844 — chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication (CVSS 6.3)
• CVE-2025-6855 — chatchat-space Langchain-Chatchat file path traversal (CVSS 8.8)
• CVE-2025-6854 — chatchat-space Langchain-Chatchat files path traversal (CVSS 4.3)
• CVE-2025-6853 — chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal (CVSS 9.8)