A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. It has been declared as critical. This vulnerability affects the function
files/list_files/retrieve_file/retrieve_file_content/delete_file of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component Compatible File Service. The manipulation results in missing authentication.
This vulnerability is reported as CVE-2026-7844. The attacker must have access to the local network to execute the attack. Moreover, an exploit is present.
The project was informed of the problem early through an issue report but has not responded yet.
