CVE-2026-7845 | chatchat-space Langchain-Chatchat up to 0.3.1.3 Vision Chat Paste Image dialogue.py PIL.Image.tobytes paste_image.image_data weak hash (Issue 5462)

A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. It has been rated as problematic. This issue affects the function PIL.Image.tobytes of the file libs/chatchat-server/chatchat/webui_pages/dialogue/dialogue.py of the component Vision Chat Paste Image Handler. This manipulation of the argument paste_image.image_data causes use of weak hash.

This vulnerability appears as CVE-2026-7845. The attacker needs to be present on the local network. In addition, an exploit is available.

The project was informed of the problem early through an issue report but has not responded yet.