CVE-2026-75128: Langchain-Chatchat 0 through 0.3.1.3

Affected technology

Langchain-Chatchat · 0 through 0.3.1.3
chatchat-space

Description’s affected range: through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the server user (root in the shipped Docker image). Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality, integrity and availability impact as high.