CVE-2026-7847 Details
Description
A vulnerability was found in chatchat-space Langchain-Chatchat up to 0.3.1.3. The affected element is the function _get_file_id of the file libs/chatchat-server/chatchat/server/api_server/openai_routes.py of the component Uploaded File Handler. Performing a manipulation results in insufficiently random values. Access to the local network is required for this attack. The attack's complexity is rated as high. The exploitability is described as difficult. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability exists in Langchain-Chatchat versions up to 0.3.1.3 within the Uploaded File Handler component. The issue arises in the function responsible for generating file identifiers for the OpenAI-compatible '/v1/files' API. The identifiers are created by base64-encoding a string that includes the purpose, date, and filename, resulting in a deterministic identifier with no randomization. This predictability allows an attacker with knowledge or the ability to guess the upload date and filename to construct valid file identifiers for any uploaded file. Exploitation of this vulnerability requires access to the local network.
To address this vulnerability, the file identifier generation function should be modified to include a unique, random component, such as a UUID, in the identifier. This change would make the identifiers less predictable and reduce the risk of unauthorized file access.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 5, 2026CISA-ADP
Assessed May 5, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/3em0/cve_repo/blob/main/Langchain-Chatchat/Vuln-3-Predictable-File-ID.md | [email protected] | ExploitTechnical Analysis |
| https://github.com/chatchat-space/Langchain-Chatchat/ | [email protected] | ProductVendor |
| https://github.com/chatchat-space/Langchain-Chatchat/issues/5464 | [email protected] | Issue TrackingTechnical DescriptionVendor |
| https://vuldb.com/submit/807796 | [email protected] | Permission Required |
| https://vuldb.com/vuln/361126 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/361126/cti | [email protected] | AdvisoryPermission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-310 | Cryptographic Issues | [email protected] |
| CWE-330 | Use of Insufficiently Random Values | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| chatchat-space Langchain-Chatchat | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 24, 2026 | CVE Translated | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 5, 2026 | New CVE Received | [email protected] |