CVE-2026-22219

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-22219
Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.

7.7 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.1 / Impact : 4.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/Chainlit/chainlit/releases/tag/2.9.4 Product Release Notes
https://www.vulncheck.com/advisories/chainlit-sqlalchemy-data-layer-ssrf-via-project-element Third Party Advisory
https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover Exploit Mitigation Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:chainlit:chainlit:*:*:*:*:*:*:*:*
History

17 Jun 2026, 10:19

Type Values Removed Values Added
Summary
  • (es) Las versiones de Chainlit anteriores a la 2.9.4 contienen una vulnerabilidad de falsificación de petición del lado del servidor (SSRF) en el flujo de actualización de /project/element cuando se configura con el backend de la capa de datos de SQLAlchemy. Un cliente autenticado puede proporcionar un valor de URL controlado por el usuario en un Element, que es recuperado por la lógica de creación de elementos de SQLAlchemy utilizando una petición HTTP GET saliente. Esto permite a un atacante realizar peticiones HTTP arbitrarias desde el servidor de Chainlit a servicios de red internos o puntos finales de metadatos en la nube y almacenar las respuestas recuperadas a través del proveedor de almacenamiento configurado.

02 Feb 2026, 20:56

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.7
First Time Chainlit
Chainlit chainlit
References () https://github.com/Chainlit/chainlit/releases/tag/2.9.4 - () https://github.com/Chainlit/chainlit/releases/tag/2.9.4 - Product, Release Notes
References () https://www.vulncheck.com/advisories/chainlit-sqlalchemy-data-layer-ssrf-via-project-element - () https://www.vulncheck.com/advisories/chainlit-sqlalchemy-data-layer-ssrf-via-project-element - Third Party Advisory
References () https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover - () https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover - Exploit, Mitigation, Third Party Advisory
CPE cpe:2.3:a:chainlit:chainlit:*:*:*:*:*:*:*:*

20 Jan 2026, 19:15

Type Values Removed Values Added
References
  • () https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover -

20 Jan 2026, 00:15

Type Values Removed Values Added
New CVE
Information

Published : 2026-01-20 00:15

Updated : 2026-07-14 16:16

NVD link : CVE-2026-22219

Mitre link : CVE-2026-22219

CVE.ORG link : CVE-2026-22219

JSON object : View

Products Affected

chainlit

  • chainlit
CWE
CWE-918

Server-Side Request Forgery (SSRF)