Description
The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary locations outside the `openai_files` directory by crafting malicious filenames.
Critical · 9.1
CVE-2026-51882
EUVD-2026-91123GHSA-p52p-3gpf-v5f9
The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write f…
Published Oct 1, 2026 · Updated Oct 7, 2026 · Assigned by mitre