PT-2025-45691 · Pypi · Langchain-Chatchat

Publicado 2025-06-29 · Atualizado 2025-06-29

OSV

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

GHSA-8V8H-4PJX-RG73

Produtos afetados

Langchain-Chatchat

Referências · 7

• https://github.com/chatchat-space/Langchain-Chatchat · Nota
• https://github.com/chatchat-space/Langchain-Chatchat/issues/5353 · Nota
• https://vuldb.com/?ctiid.314326 · Nota
• https://vuldb.com/?submit.601161 · Nota
• https://osv.dev/vulnerability/GHSA-8v8h-4pjx-rg73 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-6854 · Nota de Segurança
• https://vuldb.com/?id.314326 · Nota