Skip to content

Instantly share code, notes, and snippets.

View ycshao12's full-sized avatar

Yuchen Shao (SII) ycshao12

  • East China Normal University
View GitHub Profile
@ycshao12
ycshao12 / CVE-2025-45150
Last active July 26, 2025 03:25
CVE-2025-45150
[Suggested description]
Insecure permissions in LangChain-ChatGLM-Webui commit ef829 allows attackers to arbitrarily view and download sensitive files via supplying a crafted request.
[Vulnerability Type]
Insecure Permissions
[Vendor of Product]
https://github.com/X-D-Lab/LangChain-ChatGLM-Webui
[Affected Product Code Base]