VulnSocial

CVE-2026-51884

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-28: 110-28
Referenced assets1 URL
By indicator
Full discourse1 post
  • watchcatcyber@watchcatcyber

    🎯 CVE-2026-51884 | Langchain-Chatchat | File Upload 📈 42 attack requests from 17 unique IPs in the last 90 days #BiuTrap #ThreatIntel #CVE202651884 https://trap.biu.life/intelligence/6ae1911c10c997adc1f4b323

    0000031
    22 followersView on X

Explore more

Back to dashboard