Skip to content
OpenAdvisories

Vendor

chatchat-space

8 known vulnerabilities.

Products

Langchain-Chatchat 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-75128 Scanner template

    Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint

    Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to …

    chatchat-space Langchain-Chatchat