Metraipolis › archive › dc_9749ccbca1db

CVE-2026-75128: Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,...

Source: Metraipolis archive
Original: https://nvd.nist.gov/vuln/detail/CVE-2026-75128
License (as archived): solo-consultazione
Archived: 2026-10-20T17:12:54.375Z
SHA-256 of the archived text: 8d91d1360434bb5c3733790afe744a4352bc1d746f2cb219f3c7f94d5427262f
Stable URL of this page: https://metraipolis.com/documento/dc_9749ccbca1db

How to cite

CVE-2026-75128: Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,... — Metraipolis archive, https://nvd.nist.gov/vuln/detail/CVE-2026-75128 (solo-consultazione); archived copy: https://metraipolis.com/documento/dc_9749ccbca1db (Metraipolis archive dc_9749ccbca1db, sha256 8d91d1360434bb5c3733790afe744a4352bc1d746f2cb219f3c7f94d5427262f)

BibTeX

@misc{dc9749ccbca1db,
  title = {CVE-2026-75128: Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,...},
  howpublished = {Metraipolis archive},
  url = {https://nvd.nist.gov/vuln/detail/CVE-2026-75128},
  note = {License solo-consultazione; archived copy https://metraipolis.com/documento/dc_9749ccbca1db; sha256 8d91d1360434bb5c3733790afe744a4352bc1d746f2cb219f3c7f94d5427262f},
  year = {2026}
}

Archived text

The text is not reproduced here: the archive holds it as solo-consultazione (consultation only, no republication). Read it at the original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75128. Agents can read the archived copy with the MCP tool read_document.