VulnSocial

CVE-2026-30617Disclosure

LOWCVSS 8.6 · HIGH

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling. A remote attacker can access the publicly exposed MCP management interface and configure an MCP STDIO server with attacker-controlled commands and arguments. When the MCP server is started and MCP is enabled for agent execution, subsequent agent activity triggers execution of arbitrary commands on the server. Successful exploitation allows arbitrary command execution within the context of the LangChain-ChatChat service.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-77

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 4 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-16); latest day: 2
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01122Mentions · 2026-04-16: 2Mentions · 2026-05-03: 2Active Exploitation · 2026-05-03: 1Technical Details · 2026-04-16: 2Technical Details · 2026-05-03: 204-1605-03
Signal classification3 categories
Disclosure
250.0%
General
125.0%
Active Exploitation
125.0%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-04-162
Disclosure1General1
2026-05-032
Active Exploitation1Disclosure1
Full discourse4 posts
  • SuperTute@supertute_inc
    Active Exploitation

    MCP's STDIO server model is a security hole by design. LangChain-ChatChat and Windsurf both hit by CVEs (CVSS 8.6, 8.0) via MCP STDIO. Attacker controls the command --> your agent runs it. If you run MCP servers: audit them. Now. CVE-2026-30617 + CVE-2026-30615

    Post summary

    The text reports that LangChain-ChatChat and Windsurf are being actively exploited through the MCP STDIO vulnerability, urging users to audit their servers.

    2000048
    3 followersView on X
  • Sattyam Jain@Sattyamjjain
    Disclosure

    CVE-2026-30623 (LiteLLM), CVE-2026-30615 (Windsurf), CVE-2026-30617 (Langchain-Chatchat) all hit the same shape: a tool call resolves to shell. The MCP-STDIO transport doesn't bound it. You bound it, or you get bounded.

    Post summary

    The post lists three CVE identifiers and explains they allow a tool call to resolve to a shell, indicating a code execution flaw, but does not provide PoCs, exploit tools, patches, or evidence of active exploitation.

    1000047
    67 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-30617 LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling. A remote attacker can access the… https://www.cve.org/CVERecord?id=CVE-2026-30617 ----- Traducción: CVE-2026-30617 Lan… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-30617, noting an RCE flaw in LangChain-ChatChat 0.3.1, but provides no PoC, exploit, patch, or active exploitation evidence.

    0000060
    71 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-30617 LangChain-ChatChat 0.3.1 contains a remote code execution vulnerability in its MCP STDIO server configuration and execution handling. A remote attacker can access the… https://www.cve.org/CVERecord?id=CVE-2026-30617

    Post summary

    The text announces CVE-2026-30617 as a remote code execution flaw in LangChain-ChatChat 0.3.1, but provides no PoC, exploit code, mitigation or evidence of active exploitation.

    000001.2K
    57.2K followersView on X

Explore more

Back to dashboard