Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote attackers can send a single request naming the shell tool to execute arbitrary OS commands as the server user (root in the shipped Docker image).
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔒 #CyberSecurity CVE-2026-75128: Unauthenticated RCE in Langchain-Chatchat — Detection and Remed… "NVD has published CVE-2026-75128, a CVSS 9.8 (Critical) network-exploitable vulnerability…" 🔗 https://securityarsenal.com/blog/cve-2026-75128-unauthenticated-rce-in-langchain-chatchat-detection-and-remediation-guide #CyberSecurity #ThreatIntel #cve202675128 #critical #cve
Langchain-Chatchat CVE-2026-75128 (CVSS 9.8): one unauthenticated request to /tools/call can run OS commands as root. Affects versions through 0.3.1.3. The shell tool is always registered and the API has no authentication by default. No fix listed. VulnTracker recommends taking exposed instances off the network or putting authentication in front of them. Details: http://vulntracker.io/cves/CVE-2026-75128 #LangchainChatchat #AI #CVE #InfoSec
🚨 CVE-2026-75128 (CVSS 9.8 Critical) Langchain-Chatchat's unauthenticated /tools/call API allows remote attackers to invoke the default shell tool to execute arbitrary OS commands as root. ⚡ Action: Patch to >= v0.3.1.4 or block endpoint. 🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-75128/ https://t.co/mEKpbEFMGX