Low severity · published May 5, 2026
CVE-2026-7847
chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values
2.6
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently random values. Access to the local network is required for this attack. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack vector
Adjacent
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 14% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
Langchain-Chatchat · chatchat-space
0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3 · source: vendor
Affected product
LA
Langchain-Chatchat
chatchat-space
More from Langchain-Chatchat
9.8
CVE-2026-75128
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
9.8
CVE-2025-6853
chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal
8.8
CVE-2025-6855
chatchat-space Langchain-Chatchat file path traversal
6.3
CVE-2026-7844
chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication
4.3
CVE-2025-6854
chatchat-space Langchain-Chatchat files path traversal