CVE-2026-51883

Summary

The vulnerability allows an attacker to traverse directories and write content to arbitrary locations, potentially leading to unauthorized data access or modification.

Exploitability

Exploitation is relatively straightforward as it requires control over the `knowledge_base_name` parameter. The attacker must be able to inject path traversal sequences.

Blast radius

If exploited, this could lead to unauthorized access to sensitive files outside the intended directory, impacting data security and integrity.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Langchain-Chatchat 0.3.2 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.