{"id":"CVE-2026-51884","published":"2026-10-01T22:17:03.257","lastModified":"2026-10-05T19:17:21.813","description":"The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-22"],"vendors":[],"products":[],"references":[{"url":"https://gist.github.com/Ro1ME/da028c9ce13dd888e265b9bef01d6eca","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5466","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5466","tags":[]}],"exploitRefs":[{"url":"https://gist.github.com/Ro1ME/da028c9ce13dd888e265b9bef01d6eca","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5466","tags":[]},{"url":"https://github.com/chatchat-space/Langchain-Chatchat/issues/5466","tags":[]}],"hasPoc":true,"ai":{"summary":"The flaw allows path traversal, enabling attackers to write files to arbitrary locations on the server, bypassing intended restrictions.","exploitability":"Exploitation is moderately hard as it requires crafting specific filenames, but preconditions include access to the /knowledge_base/upload_temp_docs endpoint.","blast_radius":"If exploited, attackers could gain control over server files, leading to data loss or compromise of server functionality.","remediation":"Upgrade to Langchain Chatchat 0.3.1 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","path-traversal","web","upload"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-06T08:44:25.869Z"}}