LA
Product
Langchain-Chatchat
by chatchat-space · last CVE Oct 20, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 1Medium 2Low 3
Watch

Add Langchain-Chatchat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-75128
9.8
1%
Oct 20
Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
Affected: through 0.3.1.3
CVE-2025-6853
9.8
1%
Jun 29
chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal
Affected: 0.3.0; 0.3.1
CVE-2025-6855
8.8
1%
Jun 29
chatchat-space Langchain-Chatchat file path traversal
Affected: 0.3.0; 0.3.1
CVE-2026-7844
6.3
0%
May 5
chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication
Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3
CVE-2025-6854
4.3
1%
Jun 29
chatchat-space Langchain-Chatchat files path traversal
Affected: 0.3.0; 0.3.1
CVE-2026-7847
2.6
0%
May 5
chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values
Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3
CVE-2026-7846
2.6
0%
May 5
chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou
Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3
CVE-2026-7845
2.6
0%
May 5
chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash
Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3
Showing 8