Executive brief
LangChain-ChatGLM-Webui is a web-based interface for interacting with large language models and local knowledge bases. A security flaw in how the application handles file downloads allows unauthorized users to access and download sensitive internal files, such as configuration scripts. This could lead to the exposure of private data, credentials, or system settings, potentially compromising the entire application and its data.
Technical details
A vulnerability exists in LangChain-ChatGLM-Webui (specifically commit ef829) due to incorrect permission assignment (CWE-732) in the Knowledge Base Download Functionality. The application fails to properly validate or restrict URL paths during file download requests. A remote, unauthenticated attacker can exploit this by supplying a crafted request with relative paths to traverse directories and access sensitive files within the 'agent' directory, such as 'config.py'. This allows for arbitrary file disclosure without requiring user interaction.
Affected products
- X-D-Lab LangChain-ChatGLM-Webui commit ef829a28234228761a97541e4ebae9da4f4e6800
Timeline
- 2025-08-01: advisory: NVD publication date