CriticalVulnerability
CVE-2026-75128: Langchain-Chatchat unauthenticated shell command execution
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-75128
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
Summary
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. A remote attacker can send one request naming the shell tool to run arbitrary OS commands as the server user, which is root in the shipped Docker image.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Related items
- HighCVE-2026-77926: Aix-DB remote code execution through ChatBI common agent execute toolSimilar attack · NVD/CVE Database
- HighCVE-2026-109443: JoySafeter remote code execution via unsandboxed execute tool in CopilotSimilar attack · NVD/CVE Database
- HighCVE-2026-107366: IBM Langflow OSS message endpoints lack ownership verificationSimilar attack · NVD/CVE Database
- HighCVE-2026-53995: MLflow path traversal in FileStore trace writes via POST /api/3.0/mlflow/tracesSimilar attack · NVD/CVE Database
- MediumGHSA-2658-85cv-9wwq: Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTMLSimilar attack · GitHub Advisory Database