Executive brief
Langchain-Chatchat vulnerable to path traversal
Affected products
- PyPI langchain-chatchat
Junglewise Threat Intelligence
CVE-2025-6854: PYSEC-2026-1511 - Langchain-Chatchat vulnerable to path traversal
CVE-2025-6854 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: langchain-chatchat (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1512 - Langchain-Chatchat vulnerable to path traversal
- PYSEC-2026-1513 - Langchain-Chatchat has a Path Traversal vulnerability
- chatchat-space Langchain-Chatchat predictable file identifiers in OpenAI routes
- chatchat-space Langchain-Chatchat TOCTOU in File Upload API
- chatchat-space Langchain-Chatchat weak hash in Vision Chat Paste Image Handler