CVE-2026-75128 - Langchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint
CVE ID :CVE-2026-75128 Published : Oct. 20, 2026, 1:17 a.m. | 48 minutes ago Description :Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication, leaving the always-registered shell tool callable. Remote...