CVE-2026-30617

LangChain-ChatChat version 0.3.1 is vulnerable to Remote Code Execution (RCE) due to a flaw in its MCP STDIO server configuration and execution handling. A remote attacker can access a publicly exposed MCP management interface to configure an MCP STDIO server with arbitrary commands and arguments...