PT-2026-33071 · Unknown · Langchain-Chatchat

Published 2026-04-15 · Updated 2026-05-03 · CVE-2026-30617

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions LangChain-ChatChat version 0.3.1

Description An issue exists in the MCP STDIO server configuration and execution handling. A remote attacker can access the publicly exposed MCP management interface to configure an MCP STDIO server using attacker-controlled commands and arguments. When the MCP server is started and MCP is enabled for agent execution, subsequent agent activity triggers the execution of arbitrary commands within the context of the LangChain-ChatChat service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2026-30617

Affected Products

Langchain-Chatchat

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-30617 · Security Note
• https://twitter.com/CVEnew/status/2044738015755370920 · Twitter Post
• https://twitter.com/Sattyamjjain/status/2050891257409663331 · Twitter Post
• https://ox.security/blog/mcp-supply-chain-advisory-rce-vulnerabilities-across-the-ai-ecosystem · Note
• https://twitter.com/infoflowcloud/status/2044739679753261284 · Twitter Post