CVE-2026-51882

Name of the Vulnerable Software and Affected Versions Langchain-Chatchat version 0.3.0

Description The OpenAI-compatible file upload endpoint /v1/files is susceptible to path traversal, a condition where an attacker can access or write files outside the intended directory. By crafting malicious filenames, an attacker can write files to arbitrary locations outside the openai files directory. This issue has been exploited in real-world incidents.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict access to the /v1/files endpoint to minimize the risk of exploitation.