CVE-2026-75128Critical· 9.8▾ MidnightLangchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request nam…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the server user (root in the shipped Docker image).
Langchain-Chatchat <= 0.3.1.3Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-7846Low· 2.6Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
CVE-2026-7845Low· 2.6Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
CVE-2026-7847Low· 2.6Langchain-Chatchat Uses Insufficiently Random Values
CVE-2025-6853Medium· 6.3Langchain-Chatchat has a Path Traversal vulnerability
CVE-2025-6855Medium· 5.5Langchain-Chatchat vulnerable to path traversal
CVE-2025-6854Medium· 4.3Langchain-Chatchat vulnerable to path traversal