131 matches found
CVE-2026-51882
The Langchain-Chatchat version 0.3.0 contains a path traversal vulnerability in its OpenAI-compatible file upload endpoint, /v1/files. An attacker can craft malicious filenames to write files to arbitrary locations outside the intended openai_files directory. This vulnerability has been exploited...
Langchain-Chatchat Uses Insufficiently Random Values
A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function getfileid of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently rando...
PYSEC-2026-2557 Langchain-Chatchat Uses Insufficiently Random Values
A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function getfileid of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently rando...
Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webuipages/dialogue/dialogue.py of the component Vision Chat Paste Image Handler. This manipulation of the argument...
Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to...
PYSEC-2026-2559 Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API
A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to...
PYSEC-2026-2558 Langchain-Chatchat Uses a Broken or Risky Cryptographic Algorithm
A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webuipages/dialogue/dialogue.py of the component Vision Chat Paste Image Handler. This manipulation of the argument...
PT-2026-59216
A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api server/openai routes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads ...
PT-2026-59215
A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui pages/dialogue/dialogue.py of the component Vision Chat Paste Image Handler. This manipulation of the argument paste...
PT-2026-59214
A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function get file id of the file libs/chatchat-server/chatchat/server/api server/openai routes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently...
Langchain-Chatchat vulnerable to path traversal
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may ...
PYSEC-2026-1512 Langchain-Chatchat vulnerable to path traversal
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may ...
Langchain-Chatchat vulnerable to path traversal
A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to...
PYSEC-2026-1511 Langchain-Chatchat vulnerable to path traversal
A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to...
Langchain-Chatchat has a Path Traversal vulnerability
A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...
PYSEC-2026-1513 Langchain-Chatchat has a Path Traversal vulnerability
A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This affects the function uploadtempdocs of the file /knowledgebase/uploadtempdocs of the component Backend. The manipulation of the argument flag leads to path traversal. It is possible to...
codeqai (>=0.0.11, <=0.0.17), langchain-chatchat (>=0.3.0, <=0.3.0.20240606) +2 more potentially affected by CVE-2026-55443 via langchain (0.1.5)
langchain PYPI version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - codeqai =0.0.11, =0.3.0, =0.1.8, =0.1.9 - paddlex 3.0.0b2 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...
bot-station (>=0.2.0, <=0.8.0), comai (>=0.2.0rc0, <=0.2.0rc1) +6 more potentially affected by CVE-2026-55443 via langchain (0.1.17)
langchain PYPI version 0.1.17 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - bot-station =0.2.0, =0.2.0rc0, =0.1.25, =0.3.0.20240610, =0.11.2, =0.11.3 - tableqallmagent 0.1.14 Source cves: CVE-2026-55443 Source advisor...
codeqai (>=0.0.11, <=0.0.17), langchain-chatchat (>=0.3.0, <=0.3.0.20240606) +2 more potentially affected by CVE-2026-55443 via langchain (0.1.5)
langchain PYPI version 0.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - codeqai =0.0.11, =0.3.0, =0.1.8, =0.1.9 - paddlex 3.0.0b2 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
CVE-2026-7846
A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to...