CVE-2026-51882

Summary

This flaw allows an attacker to write files to arbitrary locations outside the intended directory, potentially leading to unauthorized data manipulation or system compromise.

Exploitability

Exploitation is relatively straightforward as attackers can craft malicious filenames to traverse paths, requiring only access to the affected endpoint.

Blast radius

If exploited, this vulnerability could lead to significant data loss or unauthorized access to sensitive files on the system.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Langchain-Chatchat 0.3.1 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.