Langchain-Chatchat
Filed as: Langchain Chatchat, LangChain-ChatChat
Newest record 2026-10-20 · 12 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Langchain-Chatchat has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 12
- closed9.8Langchain-Chatchat CVE-2026-75128: Langchain-Chatchat unauthenticated tool call endpoint allows arbitrary OS command execution
Disclosed · since 20 Oct 2026 · CVE-2026-75128
AI - closed9.1Langchain-Chatchat CVE-2026-51882: Path traversal vulnerability in Langchain-Chatchat file upload
Disclosed · since 1 Oct 2026 · CVE-2026-51882
AI - closed9.8Langchain-Chatchat CVE-2026-51884: Path traversal in Langchain Chatchat upload endpoint
Disclosed · since 1 Oct 2026 · CVE-2026-51884
AI - closed9.1Langchain-Chatchat CVE-2026-51883: Path traversal vulnerability in Langchain-Chatchat
Disclosed · since 1 Oct 2026 · CVE-2026-51883
AI - closed2.6Langchain-Chatchat CVE-2026-7847: Insufficiently random values in Langchain-Chatchat file ID generation
Disclosed · since 5 May 2026 · CVE-2026-7847
AI - closed2.6Langchain-Chatchat CVE-2026-7846: TOCTOU vulnerability in Langchain-Chatchat file upload
Disclosed · since 5 May 2026 · CVE-2026-7846
AI - closed6.3Langchain-Chatchat CVE-2026-7844: Missing authentication in Langchain-Chatchat file service
Disclosed · since 5 May 2026 · CVE-2026-7844
AI - closed2.6Langchain-Chatchat CVE-2026-7845: Weak hash usage flaw in Langchain-Chatchat
Disclosed · since 5 May 2026 · CVE-2026-7845
AI - closed8.6Langchain-Chatchat CVE-2026-30617: Remote Code Execution in LangChain-ChatChat MCP Server
Disclosed · since 15 Apr 2026 · CVE-2026-30617
AI - closed5.5Langchain-Chatchat CVE-2025-6855: Path traversal vulnerability found in Langchain-Chatchat
Disclosed · since 29 Jun 2025 · CVE-2025-6855
AI - closed4.3Langchain-Chatchat CVE-2025-6854: Langchain-Chatchat Assistant Files Path Traversal
Disclosed · since 29 Jun 2025 · CVE-2025-6854
AI - closed6.3Langchain-Chatchat CVE-2025-6853: Langchain-Chatchat Path Traversal Vulnerability
Disclosed · since 29 Jun 2025 · CVE-2025-6853
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.