En resumen
- CVE-2025-6855 es una vulnerabilidad ALTO (CVSS 8.8) que afecta a langchain-chatchat, langchain-chatchat (chatchat-space).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.67%, mayor que el 52.0% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used.
NVD description
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used.
Más vulnerabilidades de langchain-chatchat
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free