agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +4 more potentially affected by CVE-2025-68492 via chainlit (>=2.4.400, <=2.6.3)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2025-68492 Source advisory: OSV:PYSEC-2026-1238...

CVE-2025-68492

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...

CVE-2025-68492

creationtimestamp| type| source ---|---|--- 2026-01-14 10:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mceu6tvfcn2m 2026-01-24 21:24:52+00:00| seen| https://gist.github.com/alon710/18bb6ffa66139768c806e4c9482f892e...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +4 more potentially affected by CVE-2025-68492 via chainlit (>=2.4.400, <=2.6.3)

chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...

edubotics-core (>=0.1.3, <=0.1.7) potentially affected by CVE-2025-68492 via chainlit (1.2.0)

chainlit PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - edubotics-core =0.1.3, =0.1.7 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...

dictatorgenai (0.1.0), lit-data-layers (>=0.1.0, <=0.1.4) potentially affected by CVE-2025-68492 via chainlit (1.3.2)

chainlit PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - dictatorgenai 0.1.0 - lit-data-layers =0.1.0, =0.1.4 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...

swarm-plus (>=0.0.0.1, <=0.1.0) potentially affected by CVE-2025-68492 via chainlit (1.3.1)

chainlit PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - swarm-plus =0.0.0.1, =0.1.0 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...

CVE-2025-68492

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...

agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +7 more potentially affected by CVE-2025-68492 via chainlit (>=1.2.0, <=2.6.3)

chainlit PYPI version =1.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.2.2, =0.0.0.1, =0.1.0 Source cves: CVE-2025-68492 Source advisory: MEND:CVE-2025-68492...