CH
Vendor
chatchat-space
8
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75128 | LA Langchain-Chatchat chatchat-space | 9.8 | Oct 20 | Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint |
| CVE-2026-7847 | LA Langchain-Chatchat chatchat-space | 2.6 | May 5 | chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values |
| CVE-2026-7846 | LA Langchain-Chatchat chatchat-space | 2.6 | May 5 | chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou |
| CVE-2026-7845 | LA Langchain-Chatchat chatchat-space | 2.6 | May 5 | chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash |
| CVE-2026-7844 | LA Langchain-Chatchat chatchat-space | 6.3 | May 5 | chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication |
| CVE-2025-6855 | LA Langchain-Chatchat chatchat-space | 8.8 | Jun 29 | chatchat-space Langchain-Chatchat file path traversal |
| CVE-2025-6854 | LA Langchain-Chatchat chatchat-space | 4.3 | Jun 29 | chatchat-space Langchain-Chatchat files path traversal |
| CVE-2025-6853 | LA Langchain-Chatchat chatchat-space | 9.8 | Jun 29 | chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal |
