CVE-2026-75128
Received Received - Intake

Langchain-Chatchat Remote Command Execution via Unauthenticated Tool Invocation

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: VulnCheck

Description
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the server user (root in the shipped Docker image).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-75128
EUVD
EUVD-2026-104685

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
chatchat-space Langchain-Chatchat 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-306 The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unauthenticated Remote Code Execution (RCE) flaw in Langchain-Chatchat versions up to 0.3.1.3. It exists in the POST /tools/call API endpoint, which allows invoking any registered tool by name without authentication. The shell tool is always registered, enabling attackers to send a single request to execute arbitrary OS commands as the server user, often root in the default Docker image.

Detection Guidance

Check if the vulnerable POST /tools/call endpoint is exposed by sending a request to list tools. Use curl -X POST http://<target>:<port>/tools/call -H 'Content-Type: application/json' -d '{"name":"shell","parameters":{"command":"whoami"}}' to test for command execution. If the server responds with output, the system is vulnerable.

Impact Analysis

This vulnerability allows remote attackers to execute arbitrary commands on the server with the privileges of the server user. This could lead to full system compromise, data theft, unauthorized access, or disruption of services. Attackers can gain control over the affected system without needing credentials.

Compliance Impact

This vulnerability can severely impact compliance with GDPR, HIPAA, and other regulations by enabling unauthorized access to sensitive data, leading to data breaches. It undermines confidentiality, integrity, and availability requirements, potentially resulting in legal penalties, reputational damage, and loss of trust.

Mitigation Strategies

Upgrade Langchain-Chatchat to a version beyond 0.3.1.3. If upgrading is not possible, restrict access to the /tools/call endpoint via network firewall rules or disable the shell tool registration. Ensure no unauthorized access is permitted to the API server.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-75128. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart