chatchat-space Langchain-Chatchat

• CVE-2026-75128 Critical 9.8 Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint 2.2%
• CVE-2026-7847 Low 2.6 chatchat-space Langchain-Chatchat Uploaded File openai_routes.py _get_file_id random values 0.2%
• CVE-2026-7846 Low 2.6 chatchat-space Langchain-Chatchat OpenAI-Compatible File Upload API openai_routes.py files toctou 0.2%
• CVE-2026-7845 Low 2.6 chatchat-space Langchain-Chatchat Vision Chat Paste Image dialogue.py PIL.Image.tobytes weak hash 0.1%
• CVE-2026-7844 Medium 6.3 chatchat-space Langchain-Chatchat Compatible File Service openai_routes.py delete_file missing authentication 0.3%
• CVE-2025-6855 Medium 5.5 chatchat-space Langchain-Chatchat file path traversal 0.6%
• CVE-2025-6854 Medium 4.3 chatchat-space Langchain-Chatchat files path traversal 0.6%
• CVE-2025-6853 Medium 6.3 chatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal 0.6%