Read the docs
TI-2026-56755 Aliases CVE-2026-82290GHSA-4hhp-mjp7-37r2

Chainlit Feedback Endpoints Missing Ownership Validation

Priority MEDIUM 60CWE-639Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Attack requirements
Present
Impact type
Security bypass
Confidentiality · integrity · availability
None · High · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-639.

Summary

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0034 27th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Chainlitchainlitup to 2.12.0—No fix listedCNA
  • chainlit VendorChainlit Affected up to 2.12.0 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-82290
  2. 2026-10-03 Alias added: GHSA-4hhp-mjp7-37r2

References

Other 3

  • TI-2026-32874 Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution CVSS 3.1CRITICAL 9.8
  • TI-2026-17828 Chainlit < 2.9.4 Arbitrary File Read via /project/element CVSS 4.0HIGH 7.1
  • TI-2026-83858 Chainlit SSRF via Semicolon Path Segment in MCP allowed_urls CVSS 4.0MEDIUM 6.3
  • TI-2026-17829 Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element CVSS 4.0HIGH 8.3
  • TI-2026-58900 Chainlit through 2.12.0 Path Traversal via socket.io sessionId CVSS 4.0HIGH 8.8
  • TI-2026-40492 Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restoration CVSS 4.0HIGH 8.8
See all 8 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences