← Database

CVE-2025-45150

CRITICAL CVSS: 9.8 Published: 2025-08-01 Modified: 2026-07-05

Description

Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request.

Affected Platforms

X-D Lab Langchain-Chatglm-Webui

Weakness Type

CWE-732

References