What is GHSA-c869-r44m-5f4w?

GHSA-c869-r44m-5f4w is a security advisory published by GitHub Security Advisories with unknown severity. The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3...

Which CVE IDs does GHSA-c869-r44m-5f4w cover?

GHSA-c869-r44m-5f4w covers the following CVE IDs: CVE-2026-51884. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-c869-r44m-5f4wunknown

The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3...

Vendor

GitHub Security Advisories

Published

October 2, 2026

Last Modified

October 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-51884 →

📋 Description

The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious filenames, an attacker can write files to arbitrary locations on the server, bypassing the intended restrictions on the temporary directory.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-51884
https://github.com/chatchat-space/Langchain-Chatchat/issues/5466
https://gist.github.com/Ro1ME/da028c9ce13dd888e265b9bef01d6eca
https://github.com/advisories/GHSA-c869-r44m-5f4w