CVE-2026-7846

A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to time-of-check time-of-use. Access to the local network is required for this attack to succeed. The attack requires a high level of complexity. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-362
• CWE-367

• https://github.com/3em0/cve_repo/blob/main/Langchain-Chatchat/Vuln-2-Silent-File-Overwrite.md
• https://github.com/chatchat-space/Langchain-Chatchat/
• https://github.com/chatchat-space/Langchain-Chatchat/issues/5463
• https://vuldb.com/submit/807795
• https://vuldb.com/vuln/361125
• https://vuldb.com/vuln/361125/cti

Published

May 5, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-78452Out-of-bounds read in Microsoft Windows SCSI Class System Fi…4.6
• CVE-2026-78453Integer underflow (wrap or wraparound) in Microsoft Windows …6.5
• CVE-2026-78454Out-of-bounds read in Windows CD-ROM Driver allows an author…5.5
• CVE-2026-78455Out-of-bounds read in Xbox allows an unauthorized attacker t…4.3
• CVE-2026-78456Heap-based buffer overflow in SQL Server allows an authorize…8.8
• CVE-2026-78457Use after free in Windows Security Health Service allows an …7
• CVE-2026-78461Improper limitation of a pathname to a restricted directory …7.4
• CVE-2026-78462Authorization bypass through user-controlled key in Visual S…8.8
• CVE-2026-78463Improper control of generation of code ('code injection') in…8.8
• CVE-2026-78464Time-of-check time-of-use (toctou) race condition in Windows…7
• CVE-2026-78465A flaw was found in the file-pcx plugin in GIMP, affecting 3…7
• CVE-2026-78466Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…