The vulnerability is a directory traversal flaw present in the knowledge base creation and document upload endpoints of Langchain‑Chatchat versions 0.3.0 and 0.3.1. The flaw allows an attacker to inject sequences such as `..\` into the `knowledge_base_name` parameter, causing the application to write or overwrite files outside the configured knowledge base root. This could be used to create arbitrary files on the server, including configuration or executable scripts. Based on the description, it is inferred that an attacker could exploit this to gain elevated privileges or exfiltrate sensitive data by placing malicious files in privileged locations.

Langchain‑Chatchat 0.3.0 and 0.3.1 are affected. No vendor or product variants are recognized in this vulnerability record. The issue appears in the stated repository versions and affects the knowledge base functionality of the application.

The CVSS score is 9.1 and the EPSS score is < 1%, indicating high severity but low probability of exploitation. Path traversal that enables arbitrary file writes is considered a high‑severity weakness, particularly when the exposed web interface is accessible to untrusted users. The vulnerability is not listed in CISA KEV, which indicates that no publicly known exploitation activity is documented yet. The likely attack vector is remote via HTTP requests to the exposed API endpoints, and exploitation would require authenticated or unauthenticated access to the knowledge base creation/upload routes.