Cpe:2.3:a:langchain_chatchat:langchain_chatchat:*:*:*:*:*:*:*:*

Langchain-Chatchat versions up to 0.3.1.3 contain a critical vulnerability in the /tools/call endpoint that permits unauthenticated remote code execution via arbitrary tool invocation.