{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/langchain-chatchat--0.3.1.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:langchain_chatchat:langchain_chatchat:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-75128"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Langchain-Chatchat (\u003c= 0.3.1.3)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Langchain-Chatchat"],"content_html":"\u003cp\u003eLangchain-Chatchat versions through 0.3.1.3 contain a critical remote code execution vulnerability (CVE-2026-75128) resulting from improper access control on the application API. The POST /tools/call endpoint allows any remote attacker to invoke registered system tools by name without prior authentication. Because the application includes a shell execution tool among its default registered assets, an attacker can leverage this endpoint to execute arbitrary OS commands. In the standard Docker deployment configuration, this command execution occurs with root privileges, leading to full system compromise. This vulnerability is highly dangerous due to the absence of authentication requirements and the direct path to command execution.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker identifies a target host running Langchain-Chatchat (\u0026lt;= 0.3.1.3) exposed to the internet.\u003c/li\u003e\n\u003cli\u003eAttacker performs discovery to identify the API structure, locating the /tools/call endpoint.\u003c/li\u003e\n\u003cli\u003eAttacker sends a crafted HTTP POST request to the /tools/call endpoint.\u003c/li\u003e\n\u003cli\u003eThe request payload specifies the 'shell' tool as the target for execution.\u003c/li\u003e\n\u003cli\u003eThe application processes the request without validating the user session or permissions.\u003c/li\u003e\n\u003cli\u003eThe shell tool executes the attacker-supplied command string on the underlying host.\u003c/li\u003e\n\u003cli\u003eThe application returns the output of the command to the attacker.\u003c/li\u003e\n\u003cli\u003eAttacker achieves full system control as the application user (typically root).\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows unauthenticated remote attackers to execute arbitrary commands on the host server. Given the application is frequently deployed in containerized environments, this typically grants the attacker full root access to the container or host filesystem, enabling data exfiltration, lateral movement, or complete system takeover.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImmediately restrict network access to the Langchain-Chatchat API endpoint, ensuring it is not reachable from untrusted networks or the public internet.\u003c/li\u003e\n\u003cli\u003eMonitor web server logs for POST requests directed at /tools/call, especially those containing references to shell-related utilities in the request body.\u003c/li\u003e\n\u003cli\u003eApply the vendor-provided security patch once available; verify versioning for releases exceeding 0.3.1.3.\u003c/li\u003e\n\u003cli\u003eAudit all containerized deployments to ensure the application process is running with the least privilege necessary, rather than the default root user.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-20T02:31:27Z","date_published":"2026-10-20T02:31:27Z","id":"https://feed.craftedsignal.io/briefs/2026-10-langchain-chatchat-rce/","summary":"Langchain-Chatchat versions up to 0.3.1.3 contain a critical vulnerability in the /tools/call endpoint that permits unauthenticated remote code execution via arbitrary tool invocation.","title":"Unauthenticated Remote Code Execution in Langchain-Chatchat","url":"https://feed.craftedsignal.io/briefs/2026-10-langchain-chatchat-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Langchain-Chatchat (\u003c= 0.3.1.3)","version":"https://jsonfeed.org/version/1.1"}