ChatDev vulnerabilities

CVEs whose affected-version data names the ChatDev package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-58166Critical· 9.1PoC

4mo ago

OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete

OpenBMB ChatDev through 2.2.0, fixed in commit 4fd4da6, contains a path traversal vulnerability that allows unauthenticated remote attackers to write or delete arbitrary files by supplying a malicious multipart filename in the file uploa…

▾ AbyssalOpenBMB · ChatDevEPSS 0.85%via CVEORG