Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-51884: Langchain Chatchat 0.3.1 can be forced to write files anywhere
CVE-2026-51884 · published 17 days ago
Summary
The temporary document upload feature in Langchain Chatchat version 0.3.1 does not properly check file names, allowing an attacker to place files in any folder on the server. This could let malicious code be added or sensitive data be exposed. Update to a version that validates filenames or apply a server‑side fix that restricts where uploaded files can be stored.
Original advisory text
The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to ...
The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Type
CWE-22Path Traversal
Timeline
Published1 Oct 2026
Updated15 Oct 2026
First seen1 Oct 2026
Track software like this
Free during beta