Medium severity5.5NVD Advisory· Published Jun 29, 2025· Updated Apr 29, 2026

CVE-2025-6855

Description

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may be used.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
langchain-chatchatPyPI	<= 0.3.1	—

Affected products

Chatchat Space/Langchain Chatchat
cpe:2.3:a:chatchat-space:langchain-chatchat:*:*:*:*:*:*:*:*
Range: <=0.3.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

github.com/chatchat-space/Langchain-Chatchat/issues/5354nvdExploitIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-f823-phmg-x5frghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2025-6855ghsaADVISORY
vuldb.comnvdThird Party AdvisoryVDB EntryWEB
vuldb.comnvdThird Party AdvisoryVDB EntryWEB
vuldb.comnvdPermissions RequiredVDB EntryWEB

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000