Vendors / chatchat-space Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now chatchat-space records in CISA KEV No chatchat-space vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 81
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.02226 · Published 2026-10-20 · No fix listed CWE-306
Priority MEDIUM 57
A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3.
CVSS 4.0 MEDIUM 5.3· Adjacent network · No auth · No interaction · EPSS 0.00322 · Published 2026-05-05 · No fix listed CWE-287
Priority MEDIUM 57
A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00592 · Published 2025-06-29 · No fix listed CWE-22
Priority MEDIUM 57
A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1.
CVSS 4.0 MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.006 · Published 2025-06-29 · No fix listed CWE-22
Priority MEDIUM 56
A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1.
CVSS 4.0 MEDIUM 5.1· Adjacent network · Low privileges · No interaction · EPSS 0.00598 · Published 2025-06-29 · No fix listed CWE-22
Priority MEDIUM 44
A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3.
CVSS 4.0 LOW 2.1· Adjacent network · Low privileges · No interaction · EPSS 0.00235 · Published 2026-05-05 · No fix listed CWE-310
Priority MEDIUM 44
A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.
CVSS 4.0 LOW 2.1· Adjacent network · Low privileges · No interaction · EPSS 0.00162 · Published 2026-05-05 · No fix listed CWE-362
Priority MEDIUM 44
A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.
CVSS 4.0 LOW 2.1· Adjacent network · Low privileges · No interaction · EPSS 0.0014 · Published 2026-05-05 · No fix listed CWE-327
Open these records in search → All records by CVSS severity
1 0 4 3 0
THREATIST.IORead the docs