Em resumo
- CVE-2025-6855 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta langchain-chatchat, langchain-chatchat (chatchat-space).
- Chance de exploração nos próximos 30 dias (EPSS): 0.67%, maior que 52.0% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used.
NVD description
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used.
Mais vulnerabilidades de langchain-chatchat
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free