{"data":{"id":"44ddc0b7-84fd-4f09-8b76-7f616cbb3c56","title":"CVE-2025-6854: A vulnerability classified as problematic was found in chatchat-space Langchain-Chatchat up to 0.3.1. This…","summary":"A path traversal vulnerability, CVE-2025-6854, affects chatchat-space Langchain-Chatchat up to 0.3.1, in unknown code of the file /v1/files?purpose=assistants. The flaw can be exploited remotely, and the source notes that the exploit has been publicly disclosed and may be used. VulDB rates it CVSS 4.0 5.3 (MEDIUM), while NIST has not yet provided an assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-6854","publishedAt":"2025-06-29T13:15:24.020Z","cveId":"CVE-2025-6854","cweIds":["CWE-22"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["langchain-chatchat@<= 0.3.1"],"affectedPackageNames":["langchain-chatchat"],"affectedPackageRefs":["pypi:langchain-chatchat"],"affectedVendors":[],"affectedVendorsRaw":["Langchain-Chatchat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Langchain-Chatchat path traversal in /v1/files?purpose=assistants","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00592,"epssCheckedAt":"2026-11-04T06:10:14.546Z","kevDateAdded":null,"advisoryAliases":["GHSA-8v8h-4pjx-rg73"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:53:31.655Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}