CVE-2026-7847General

LOWCVSS 1.2 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently random values. Access to the local network is required for this attack. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-310CWE-330

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

General: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

General

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud158d
General
🚨*CVE* CVE-2026-7847 A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatcha… https://www.cve.org/CVERecord?id=CVE-2026-7847 ----- Traducción: CVE-2026-7847 Se … http://infoflow.cloud`
Post summary
The tweet reports that CVE‑2026‑7847 affects the _get_file_id function in the Langchain‑Chatchat project and links to the official CVE record, but provides no evidence of exploitation, patching, or detailed technical explanation.
0000043
75 followersView on X
CVE@CVEnew158d
General
CVE-2026-7847 A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatcha… https://www.cve.org/CVERecord?id=CVE-2026-7847
Post summary
The text references CVE-2026-7847 in chatchat-space Langchain-Chatchat up to 0.3.1.3, noting the _get_file_id function as affected, but provides no further technical, exploitation, or remediation details.
00000147
57.4K followersView on X

Explore more

Back to dashboard