Vulnerabilities in Chainlit
9 resultsCVE-2026-22218HIGHChainlit < 2.9.4 Arbitrary File Read via /project/elementEPSS 9.7%CVE-2026-22219HIGHChainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/elementEPSS 5.2%CVE-2026-45018CRITICALChainlit: Command injection via MCP stdio transport allows unauthenticated remote code executionEPSS 1.1%CVE-2026-86099HIGHChainlit through 2.12.0 Path Traversal via socket.io sessionIdEPSS 0.6%CVE-2026-45019HIGHChainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network accessEPSS 0.4%CVE-2026-56104HIGHChainlit < 2.10.1 Session Hijacking via WebSocket Session RestorationEPSS 0.4%CVE-2026-82290MEDIUMChainlit Feedback Endpoints Missing Ownership ValidationEPSS 0.3%CVE-2025-68492LOWChainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploitEPSS 0.2%CVE-2026-120492MEDIUMChainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urlsEPSS 0.2%