CVE database · Agent platforms and AI apps
Chainlit vulnerabilities and CVEs
The Beam CVE database tracks 5 security advisories for Chainlit: 2 critical, 2 high and 1 low severity. The newest is CVE-2026-45018, published Aug 25, 2026 and fixed in 2.12.0.
A Python framework for building chat interfaces for LLM apps and agents.
Check your version: pip show chainlit
- Vulnerabilities tracked
- 5
- Critical
- 2
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-45018
Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution
critical9.8Aug 25, 2026CVE-2026-45019
Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access
high7.2Aug 25, 2026CVE-2026-56104
Chainlit contains a session hijacking vulnerability
critical7.4Jun 22, 2026CVE-2026-22219
Chainlit contain a server-side request forgery (SSRF) vulnerability
high7.7Jan 20, 2026CVE-2025-68492
Chainlit contains an authorization bypass vulnerability
low4.2Jan 14, 2026