Components Vulnerabilities Pricing MCP API

chainlit 2.8.3 | Vulnerabilities | Sonatype Guide

chainlit

2.8.3

chainlit 2.8.3

PublishedOct 6, 2025•Policy

compliance

Developer Trust Score

N/A

Recommended Version:x.y.z

Latest version with 0 known vulnerabilities that meets your policy.

Compare Versions

Severity

Critical (0)

High (2)

Medium (2)

Low (1)

CVSS Score

0.010.0

EPSS Score

0.01.0

Malware

KEV StatusPublished

6.5CVE-2026-22218

Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element identifier (chainlitKey) can then be used to retrieve the file contents via /project/file/<chainlitKey>, allowing disclosure of any file readable by the Chainlit service.

PublishedJan 20, 2026

7.7CVE-2026-22219

Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.

PublishedJan 20, 2026

2.3CVE-2025-68492

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.

PublishedJan 15, 2026

5.3sonatype-2026-000008

chainlit - Path Traversal

PublishedJan 5, 2026

8.8sonatype-2025-007362

chainlit - Authorization Bypass Through User-Controlled Key

PublishedDec 1, 2025