{"id":"CVE-2026-51883","published":"2026-10-01T22:17:03.127","lastModified":"2026-10-05T19:17:21.630","description":"The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal. An attacker can inject path traversal sequences (such as `..\\`) into the `knowledge_base_name` parameter to write knowledge base content to arbitrary locations outside the configured knowledge base root directory.","cvssScore":9.1,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/30f5139a2920bf7075299a33eb1690f2","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5467","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5467","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/30f5139a2920bf7075299a33eb1690f2","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5467","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5467","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows an attacker to traverse directories and write content to arbitrary locations, potentially leading to unauthorized data access or modification.","exploitability":"Exploitation is relatively straightforward as it requires control over the `knowledge_base_name` parameter. The attacker must be able to inject path traversal sequences.","blast_radius":"If exploited, this could lead to unauthorized access to sensitive files outside the intended directory, impacting data security and integrity.","remediation":"Upgrade to Langchain-Chatchat 0.3.2 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["path-traversal","data-leak","security"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:44:41.755Z"}}