[ Vendor · 1 CVEs ]

Chainlit

CVEs affecting Chainlit published in the last 30 days, plus any Chainlit CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-120492 2 Nov 2026 CVSS 5.4 ChainlitChainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowed_urls…