Chainlit

6 CVEs across 1 Chainlit products. Browse Chainlit vulnerabilities, severities, and proof-of-concept exploits.

Chainlit products with known CVEs

ProductCVEs
Chainlit6
Chainlit CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45019High7.22026-08-25Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp…
CVE-2026-45018Critical9.82026-08-25Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp…
CVE-2026-56104High8.22026-06-22Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by p…
CVE-2026-22219High7.72026-01-20Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlc…
CVE-2026-22218Medium6.52026-01-20Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom El…
CVE-2025-68492Medium4.22026-01-14Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be…