Langchain-Chatchat vulnerable to path traversal

GHSA-8v8h-4pjx-rg73 · CVE-2025-6854 · PYSEC-2026-1511 · 갱신 2026. 7. 8.

해야 할 일

아직 수정 버전이 없습니다. 원문의 우회 방법을 확인하고 노출 범위를 줄이세요.

영향 받는 패키지

생태계	패키지	수정 버전
PyPI	langchain-chatchat	없음

원문

Langchain-Chatchat vulnerable to path traversal

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This vulnerability affects unknown code of the file /v1/files?purpose=assistants. The manipulation leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

출처

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-6854
WEBhttps://github.com/chatchat-space/Langchain-Chatchat/issues/5353
PACKAGEhttps://github.com/chatchat-space/Langchain-Chatchat
WEBhttps://vuldb.com/?ctiid.314326
WEBhttps://vuldb.com/?id.314326
WEBhttps://vuldb.com/?submit.601161

오늘 목록으로

Langchain-Chatchat vulnerable to path traversal (GHSA-8v8h-4pjx-rg73) · Sieve