Authorization bypass in Chainlit
Priority LOW 11CWE-639Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-639.
Summary
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00222 12th percentileScored 2026-11-07
Fix Fixed Chainlit (Chainlit): 2.8.5chainlit (PyPI): 2.8.5
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Chainlit | Chainlit | before 2.8.5 | 2.8.5 | Patch available | CNA |
| — | chainlit (PyPI) | before 2.8.5 | 2.8.5 | Patch available | GHSA-v492-6xx2-p57g |
- Chainlit VendorChainlit Affected before 2.8.5 Fixed in 2.8.5 Patch available CNA
- chainlit (PyPI) Vendor— Affected before 2.8.5 Fixed in 2.8.5 Patch available GHSA-v492-6xx2-p57g
Remediation
- Fix · CNA Chainlit (Chainlit) Fixed in 2.8.5
- Fix · GHSA-v492-6xx2-p57g chainlit (PyPI) Fixed in 2.8.5 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2025-68492
- 2026-10-03 Alias added: GHSA-v492-6xx2-p57g
References
Other 7
- https://github.com/Chainlit/chainlit/releases
- https://jvn.jp/en/jp/JVN34964581/
- https://github.com/Chainlit/chainlit/pull/2637
- https://github.com/Chainlit/chainlit/commit/8f1153db439eca58ae5c50c8276ba6fdd311448e
- https://github.com/Chainlit/chainlit
- https://github.com/Chainlit/chainlit/releases/tag/2.8.5
- https://jvn.jp/en/jp/JVN34964581
More Chainlit vulnerabilities
- TI-2026-32874 Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution CVSS 3.1CRITICAL 9.8
- TI-2026-17828 Chainlit < 2.9.4 Arbitrary File Read via /project/element CVSS 4.0HIGH 7.1
- TI-2026-83858 Chainlit SSRF via Semicolon Path Segment in MCP allowed_urls CVSS 4.0MEDIUM 6.3
- TI-2026-56755 Chainlit Feedback Endpoints Missing Ownership Validation CVSS 4.0MEDIUM 6.0
- TI-2026-17829 Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element CVSS 4.0HIGH 8.3
- TI-2026-58900 Chainlit through 2.12.0 Path Traversal via socket.io sessionId CVSS 4.0HIGH 8.8
Sources
- CVE-2025-68492 · CVE Program
- CVE-2025-68492 · NVD
- FIRST EPSS
- GHSA-v492-6xx2-p57g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences