CVE-2026-51884
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 01, 2026
Vendor
unknown
Description
The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory.