CRITICAL 9.3 NVD
CVE-2026-75128
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-r
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the server user (root in the shipped Docker image).
References
- https://github.com/chatchat-space/Langchain-Chatchat/blob/a6a9193b5002061719f0eee62c6310bd
- https://www.lasso.security/vulnerability-database/cve-2026-75128
- https://www.vulncheck.com/advisories/langchain-chatchat-through-0.3.1.3-unauthenticated-rc
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-10-20 via NVD.
Risk Timeline
CVE Disclosed2026-10-20 · -1 days ago
Remediation Resources
vulnfeed aggregates 17400 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.