These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-82290 debrief based on CVE Program and NIST NVD records. Chainlit through 2.12.0 has a medium-severity vulnerability allowing authenticated attackers to delete or modify other users' feedback due to missing ownership validation in PUT and DELETE endpoints. This vulnerability impacts the integrity of human-rating data used for model evaluation. Defenders should assess exposure and prioritize remed [truncated]
CVE-2026-45019 is a Server-Side Request Forgery (SSRF) vulnerability in Chainlit, a Python framework for building conversational AI applications. The vulnerability affects Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml, exposing the POST /mcp endpoint without requiring authentication. This allows an attacker to make blind outbound requests to arbitrary internal or exte [truncated]
CVE-2026-45018 is a critical vulnerability in Chainlit, a Python framework for building conversational AI applications. The vulnerability affects versions from 2.4.0rc0 to 2.12.0 and allows for arbitrary shell command execution via the POST /mcp endpoint when features.mcp.enabled is set to true in .chainlit/config.toml. This issue is fixed in version 2.12.0.
CVE-2026-56104 is a session hijacking vulnerability in Chainlit before 2.10.1. This vulnerability allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without ownership verification. Attackers can exploit the restore_existing_session path to assume a victim's permissions and roles, enabling unauthorized inv [truncated]
CVE-2026-22219 is a server-side request forgery (SSRF) vulnerability in Chainlit versions prior to 2.9.4. The vulnerability exists in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled URL value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows [truncated]
CVE-2026-22218 is a high-severity vulnerability in Chainlit versions prior to 2.9.4. An authenticated client can exploit the /project/element update flow by sending a custom Element with a user-controlled path value, leading to arbitrary file disclosure. This vulnerability allows an attacker to read any file that is readable by the Chainlit service.