LA
Product
Langchain-Chatchat
8
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 1Medium 2Low 3
Watch
Add Langchain-Chatchat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-75128 | 9.8 | Oct 20 | Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint Affected: through 0.3.1.3 |
| CVE-2025-6853 | 9.8 | Jun 29 | chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal Affected: 0.3.0; 0.3.1 |
| CVE-2025-6855 | 8.8 | Jun 29 | chatchat-space Langchain-Chatchat file path traversal Affected: 0.3.0; 0.3.1 |
| CVE-2026-7844 | 6.3 | May 5 | chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3 |
| CVE-2025-6854 | 4.3 | Jun 29 | chatchat-space Langchain-Chatchat files path traversal Affected: 0.3.0; 0.3.1 |
| CVE-2026-7847 | 2.6 | May 5 | chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3 |
| CVE-2026-7846 | 2.6 | May 5 | chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3 |
| CVE-2026-7845 | 2.6 | May 5 | chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash Affected: 0.3.1.0; 0.3.1.1; 0.3.1.2; 0.3.1.3 |
Showing 8
