A vulnerability, which was classified as critical, has been found in chatchat-space LangChain-ChatChat 0.3.1. This impacts an unknown function of the component MCP STDIO Server Configuration Handler. Performing a manipulation results in command injection.

This vulnerability is cataloged as CVE-2026-30617. It is possible to initiate the attack remotely. There is no exploit available.