gcdRadar
archive/Patch now/AIR-2025-0435
closedclosed 29 Jun 2025Patch now2 Disclosed vulnerabilityAI

CVE-2025-6855: Path traversal vulnerability found in Langchain-Chatchat

Langchain-Chatchat

A path traversal vulnerability exists in Langchain-Chatchat up to version 0.3.1 via the file processing endpoint. The issue is publicly disclosed but no exploitation confirmation has been provided.

disclosed CVENo confirmed exploitation, so this record is tracked as a disclosed vulnerability and not counted as an incident. It moves into the counts if CISA or the vendor confirms exploitation. Why

CVSS
5.5
EPSS
0.01 · top 51% · 2026-11-13
EPSS scores by FIRST
fix status
Fix status unknown
first report
29 Jun 2025
last update
29 Jun 2025
CVE ids
CVE-2025-6855other records

Timeline · 1

  1. 29 Jun 2025CVE-2025-6855: A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1.

Sources · 1

Advisories and databases

  1. 2025-06-29
    CVE-2025-6855: A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1.
    NVD · nvd.nist.gov/vuln/detail/CVE-2025-6855

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Patch now
AI role
Attack on AI
categories
Infrastructure vulnerability
severity
2 · Disclosed vulnerability
fix status
Fix status unknown
targets
Framework / tooling
owasp llm top 10
LLM03:2025 Supply Chain
mitre atlas
no technique for these categories
tags
path-traversal
dates
happened 29 Jun 2025 · first reported 29 Jun 2025
origin
NVD
Vulnerability record from NVD / the GitHub Advisory Database. This product uses the NVD API but is not endorsed or certified by the NVD.
record
confidence 0.95 · created 2026-10-18 10:04Z · updated 2026-10-18 10:04Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# CVE-2025-6855: Path traversal vulnerability found in Langchain-Chatchat

https://gcdradar.vercel.app/incidents/cve-2025-6855-path-traversal-vulnerability-found-in-langchai · AIR-2025-0435 · closed 2025-06-29

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-06-29
- AI role: Attack on AI
- Products: Langchain-Chatchat
- CVE ids: CVE-2025-6855
- CVSS: 5.5

## Summary

A path traversal vulnerability exists in Langchain-Chatchat up to version 0.3.1 via the file processing endpoint. The issue is publicly disclosed but no exploitation confirmation has been provided.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-06-29: CVE-2025-6855: A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. (https://nvd.nist.gov/vuln/detail/CVE-2025-6855)

## Sources

- 2025-06-29 NVD: CVE-2025-6855: A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. https://nvd.nist.gov/vuln/detail/CVE-2025-6855

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed4.3
    Langchain-Chatchat CVE-2025-6854: Langchain-Chatchat Assistant Files Path Traversal

    Patch now · Disclosed · since 29 Jun 2025 · CVE-2025-6854

    AI
  2. closed6.3
    Langchain-Chatchat CVE-2025-6853: Langchain-Chatchat Path Traversal Vulnerability

    Patch now · Disclosed · since 29 Jun 2025 · CVE-2025-6853

    AI
  3. closed9.8
    Langchain-Chatchat CVE-2026-75128: Langchain-Chatchat unauthenticated tool call endpoint allows arbitrary OS command execution

    Patch now · Disclosed · since 20 Oct 2026 · CVE-2026-75128

    AI
  4. closed9.1
    Langchain-Chatchat CVE-2026-51882: Path traversal vulnerability in Langchain-Chatchat file upload

    Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51882

    AI
  5. closed9.1
    Langchain-Chatchat CVE-2026-51883: Path traversal vulnerability in Langchain-Chatchat

    Patch now · Disclosed · since 1 Oct 2026 · CVE-2026-51883

    AI
  6. closed2.6
    Langchain-Chatchat CVE-2026-7847: Insufficiently random values in Langchain-Chatchat file ID generation

    Patch now · Disclosed · since 5 May 2026 · CVE-2026-7847

    AI