Vendor
Langchain-Chatchat versions up to 0.3.1.3 contain a critical vulnerability in the /tools/call endpoint that permits unauthenticated remote code execution via arbitrary tool invocation.