Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Chainlit

CVE-2026-22219: Chainlit contain a server-side request forgery (SSRF) vulnerability

highCVSS 4.0 8.3 · 3.1 7.7GHSA-2g59-m95p-pgfq

Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request.

Published Jan 20, 2026 · Updated Feb 2, 2026

Affected packages

chainlit

Ecosystem
PyPI
Affected
< 2.9.4
Fixed in
2.9.4
Check
pip show chainlit

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Chainlit vulnerabilities

All Chainlit entries