Read the docs
TI-2026-17829 Aliases CVE-2026-22219GHSA-2g59-m95p-pgfq

Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element

Priority MEDIUM 50CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-918 and the CVSS impact.

Summary

Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.05174 92nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix Fixed Chainlit (Chainlit): 2.9.4chainlit (PyPI): 2.9.4

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ChainlitChainlitbefore 2.9.42.9.4Patch availableCNA
—chainlit (PyPI)before 2.9.42.9.4Patch availableGHSA-2g59-m95p-pgfq
  • Chainlit VendorChainlit Affected before 2.9.4 Fixed in 2.9.4 Patch available CNA
  • chainlit (PyPI) Vendor— Affected before 2.9.4 Fixed in 2.9.4 Patch available GHSA-2g59-m95p-pgfq

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:chainlit:chainlit:*:*:*:*:*:*:*:*before 2.9.4VulnerableChainlit
  • cpe:2.3:a:chainlit:chainlit:*:*:*:*:*:*:*:* Versions before 2.9.4 Vulnerable ·Chainlit

Remediation

  • Fix · CNA Chainlit (Chainlit) Fixed in 2.9.4
  • Fix · GHSA-2g59-m95p-pgfq chainlit (PyPI) Fixed in 2.9.4 Advisory →

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Chainlit 2.9.4

    2 records Highest priority Priority MEDIUM 2 MEDIUM

    Other records, highest priority first

    • TI-2026-17828 Chainlit < 2.9.4 Arbitrary File Read via /project/elementPriority MEDIUM 64
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-22219
  2. 2026-10-03 Alias added: GHSA-2g59-m95p-pgfq

References

Exploit 1

Patch 1

Advisory 1

Other 2

  • TI-2026-17828 Chainlit < 2.9.4 Arbitrary File Read via /project/element CVSS 4.0HIGH 7.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences