Chainlit Chainlit

• CVE-2026-120492 Medium 5.4 Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls 0.2%
• CVE-2026-86099 High 8.2 Chainlit through 2.12.0 Path Traversal via socket.io sessionId 0.6%
• CVE-2026-82290 Medium 5.3 Chainlit Feedback Endpoints Missing Ownership Validation 0.3%
• CVE-2026-45019 High 7.2 Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access 0.4%
• CVE-2026-45018 Critical 9.8 Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution 1.1%
• CVE-2026-56104 High 8.2 Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restoration 0.4%
• CVE-2026-22219 High 8.3 Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element 5.2%
• CVE-2026-22218 High 7.1 Chainlit < 2.9.4 Arbitrary File Read via /project/element 9.7%
• CVE-2025-68492 Medium 4.2 Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtaine 0.2%