Read the docs

Chainlit

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Chainlit records in CISA KEV

No Chainlit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chainlit 2 records MEDIUM

Records

9 records

TI-2026-17828 CVE-2026-22218 · GHSA-gm79-2pvc-wc75

Chainlit < 2.9.4 Arbitrary File Read via /project/element

Priority MEDIUM 64

Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.09724 Published 2026-01-19 Fixed in 2.9.4 CWE-22
TI-2026-83858 CVE-2026-120492 · GHSA-xhx7-9vjr-p2h8

Chainlit SSRF via Semicolon Path Segment in MCP allowed_urls

Priority MEDIUM 61

Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowed_urls entries because validate_mcp_url does not reject the semicolon character.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00221 Published 2026-11-02 No fix listed CWE-918
TI-2026-56755 CVE-2026-82290 · GHSA-4hhp-mjp7-37r2

Chainlit Feedback Endpoints Missing Ownership Validation

Priority MEDIUM 60

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0034 Published 2026-08-28 No fix listed CWE-639
TI-2026-17829 CVE-2026-22219 · GHSA-2g59-m95p-pgfq

Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element

Priority MEDIUM 50

Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.05174 Published 2026-01-19 Fixed in 2.9.4 CWE-918
TI-2026-58900 CVE-2026-86099 · GHSA-wf68-h55h-fvxv

Chainlit through 2.12.0 Path Traversal via socket.io sessionId

Priority MEDIUM 45

Chainlit through 2.12.0 fails to validate the client-supplied socket.io sessionId parameter, allowing unauthenticated attackers to traverse filesystem paths by injecting absolute or relative path sequences.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00598 Published 2026-09-09 No fix listed CWE-22
TI-2026-40492 CVE-2026-56104 · GHSA-c39v-8hrw-h448

Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restoration

Priority MEDIUM 40

Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restorat…

CVSS 4.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00417 Published 2026-06-22 Fixed in 2.10.1 CWE-862
TI-2025-42013 CVE-2025-68492 · GHSA-v492-6xx2-p57g

Authorization bypass in Chainlit

Priority LOW 11

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability.

CVSS 4.0LOW 2.3 Network Low privileges No interaction EPSS 0.00222 Published 2026-01-14 Fixed in 2.8.5 CWE-639
Open these records in search →