Vulnerabilities

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable.

A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3.

A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.

A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.

A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3.

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1.

A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1.

A vulnerability classified as critical has been found in chatchat-space Langchain-Chatchat up to 0.3.1.