Langchain-Chatchat /tools/call allows unauthenticated remote shell

CVE-2026-75128 (CVSS 9.8) in Langchain-Chatchat through 0.3.1.3 lets anyone call any registered tool via POST /tools/call without authentication. The always-registered shell tool means a single request executes OS commands as the server user, root in the shipped Docker image. No fixed release is listed.

• CVE-2026-75128: CVSS 9.8, CWE-306, affects versions through 0.3.1.3
• POST /tools/call invokes any tool by name with no auth check
• The shell tool is always registered; Docker image runs as root
• No fix yet; block /tools and disable the shell tool