Langchat
Monthly
Missing authentication in LangChat lets unauthenticated remote attackers reach the application's REST controllers, because a default deployment up to commit 2a6285a never registers a Sa-Token interceptor. Calling endpoints such as /api/v1/auth/users returns user records containing plaintext passwords, and the same absent authorization check lets an attacker read LLM provider API keys, create super-admin accounts, and modify or delete stored data. The independent assessment scores this 9.8 under CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) with no special conditions beyond network reachability; the technical detail is publicly documented, but no public exploit identified at time of analysis and no confirmed actively exploited (CISA KEV) status.
Missing authentication in LangChat lets unauthenticated remote attackers reach the application's REST controllers, because a default deployment up to commit 2a6285a never registers a Sa-Token interceptor. Calling endpoints such as /api/v1/auth/users returns user records containing plaintext passwords, and the same absent authorization check lets an attacker read LLM provider API keys, create super-admin accounts, and modify or delete stored data. The independent assessment scores this 9.8 under CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:H) with no special conditions beyond network reachability; the technical detail is publicly documented, but no public exploit identified at time of analysis and no confirmed actively exploited (CISA KEV) status.