CVE-2026-75128: Langchain-Chatchat ≤0.3.1.3 has a CRITICAL flaw — POST /tools/call API lacks auth, letting attackers run OS commands as root 🐧. Restrict access & check for vendor updates. https://radar.offseq.com/threat/cve-2026-75128-missing-authentication-for-critical-function-in-chatchat-space-langchain-chatchat-55683d256ecad35b #OffSeq #vuln #CVE202675128 #infosec
