CVE-2025-68492

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...

CVE-2025-68492

creationtimestamp| type| source ---|---|--- 2026-01-14 10:26:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mceu6tvfcn2m 2026-01-24 21:24:52+00:00| seen| https://gist.github.com/alon710/18bb6ffa66139768c806e4c9482f892e...

CVE-2025-68492

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...