Vulnerability details

CVE-2026-75128

chatchat-space Langchain-Chatchat

Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint

CVSS 4.0

9.3Critical

Official description

Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the server user (root in the shipped Docker image).

CVSS scores

Score	Version	Source	Vector
9.3Critical	4.0	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`
9.8Critical	3.1	CVEProject cvelistV5 (CNA) (VulnCheck)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
chatchat-space	Langchain-Chatchat	v ≤ 0.3.1.3	CVEProject cvelistV5 (CNA)

References and advisories

https://www.lasso.security/vulnerability-database/cve-2026-75128 technical-descriptionexploit
https://github.com/chatchat-space/Langchain-Chatchat/blob/a6a9193b5002061719f0eee62c6310bd5b1b7f63/libs/chatchat-server/chatchat/server/api_server/tool_routes.py#L33 technical-description
https://www.vulncheck.com/advisories/langchain-chatchat-through-0.3.1.3-unauthenticated-rce-via-tools-call-endpoint third-party-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-10-20
Last updated: 2026-10-20
State: Published
Assigner (CNA): VulnCheck
Kolun priority: 45 · Medium

Exploit prediction (EPSS)

2.22%

Probability of exploitation in 30 days

82.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: Yes
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-306
Missing Authentication for Critical Function