These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-56104 is a session hijacking vulnerability in Chainlit before 2.10.1. This vulnerability allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without ownership verification. Attackers can exploit the restore_existing_session path to assume a victim's permissions and roles, enabling unauthorized inv [truncated]
CVE-2026-22219 is a server-side request forgery (SSRF) vulnerability in Chainlit versions prior to 2.9.4. The vulnerability exists in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled URL value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows [truncated]
CVE-2026-22218 is a high-severity vulnerability in Chainlit versions prior to 2.9.4. An authenticated client can exploit the /project/element update flow by sending a custom Element with a user-controlled path value, leading to arbitrary file disclosure. This vulnerability allows an attacker to read any file that is readable by the Chainlit service.