{"id":"CVE-2026-51882","published":"2026-10-01T22:17:03.003","lastModified":"2026-10-07T15:17:22.240","description":"The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary locations outside the `openai_files` directory by crafting malicious filenames.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/f80ac458836b59adb9c6ceff3993f7f3","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5468","tags":[]},{"url":"https://gist.github.com/Ro1ME/f80ac458836b59adb9c6ceff3993f7f3","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5468","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/f80ac458836b59adb9c6ceff3993f7f3","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5468","tags":[]},{"url":"https://gist.github.com/Ro1ME/f80ac458836b59adb9c6ceff3993f7f3","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5468","tags":[]}],"hasPoc":true,"ai":{"summary":"This flaw allows an attacker to write files to arbitrary locations outside the intended directory, potentially leading to unauthorized data manipulation or system compromise.","exploitability":"Exploitation is relatively straightforward as attackers can craft malicious filenames to traverse paths, requiring only access to the affected endpoint.","blast_radius":"If exploited, this vulnerability could lead to significant data loss or unauthorized access to sensitive files on the system.","remediation":"Upgrade to Langchain-Chatchat 0.3.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","file-write","security"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:59.204Z"}}