CVE-2025-6854

🗓️ 29 Jun 2025 08:31:04Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 12 Views🌐 WEB

Vulnerability CVE-2025-6854 in Langchain-Chatchat allows remote path traversal exploitation.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-6854	29 Jun 202508:53	–	circl
CNNVD	LangChain-Chatchat 路径遍历漏洞	29 Jun 202500:00	–	cnnvd
Cvelist	CVE-2025-6854 chatchat-space Langchain-Chatchat files path traversal	29 Jun 202508:31	–	cvelist
EUVD	EUVD-2025-19479	3 Oct 202520:07	–	euvd
Github Security Blog	Langchain-Chatchat vulnerable to path traversal	29 Jun 202509:30	–	github
NVD	CVE-2025-6854	29 Jun 202509:15	–	nvd
OSV	GHSA-8V8H-4PJX-RG73 Langchain-Chatchat vulnerable to path traversal	29 Jun 202509:30	–	osv
Positive Technologies	PT-2025-27355 · Unknown · Langchain-Chatchat	29 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6854	1 Jul 202508:52	–	redhatcve
Snyk	Directory Traversal	29 Jun 202509:30	–	snyk

NVD

Vulners

Node

chatchat-space langchain-chatchatRange≤0.3.1

[
  {
    "vendor": "chatchat-space",
    "product": "Langchain-Chatchat",
    "versions": [
      {
        "version": "0.3.0",
        "status": "affected"
      },
      {
        "version": "0.3.1",
        "status": "affected"
      }
    ]
  }
]