167 matches found
CVE-2025-68492
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
edubotics-core (>=0.1.3, <=0.1.7) potentially affected by CVE-2025-68492 via chainlit (1.2.0)
chainlit PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - edubotics-core =0.1.3, =0.1.7 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...
swarm-plus (>=0.0.0.1, <=0.1.0) potentially affected by CVE-2025-68492 via chainlit (1.3.1)
chainlit PYPI version 1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - swarm-plus =0.0.0.1, =0.1.0 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...
GHSA-V492-6XX2-P57G Chainlit contains an authorization bypass vulnerability
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
dictatorgenai (0.1.0), lit-data-layers (>=0.1.0, <=0.1.4) potentially affected by CVE-2025-68492 via chainlit (1.3.2)
chainlit PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on chainlit and may be impacted: - dictatorgenai 0.1.0 - lit-data-layers =0.1.0, =0.1.4 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...
agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +4 more potentially affected by CVE-2025-68492 via chainlit (>=2.4.400, <=2.6.3)
chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2025-68492 Source advisory: GHSA-V492-6XX2-P57G...
Chainlit contains an authorization bypass vulnerability
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +4 more potentially affected by CVE-2025-68492 via chainlit (>=2.4.400, <=2.6.3)
chainlit PYPI version =2.4.400, =0.1.0, =0.1.1, =0.1.0, =0.2.2, =0.2.4 Source cves: CVE-2025-68492 Source advisory: OSV:GHSA-V492-6XX2-P57G...
Chainlit vulnerable to improper access restriction
Overview Chainlit provided by Chainlit contains the following vulnerability. Authorization bypass through user-controlled key CWE-639 - CVE-2025-68492 Shotaro Kimura of NRI SecureTechnologies, Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...
CVE-2025-68492
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
CVE-2025-68492
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
EUVD-2026-2448
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
CVE-2025-68492
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
CVE-2025-68492
Chainlit contains an authorization bypass vulnerability (CVE-2025-68492) affecting versions prior to 2.8.5. An attacker who can log in may view threads or obtain thread ownership due to a user-controlled key flaw (CWE-639). Documented impact is limited to those who can authenticate; no exploit sp...
agentic-kernel (>=0.1.0, <=0.1.10), boterview (1.3.0) +7 more potentially affected by CVE-2025-68492 via chainlit (>=1.2.0, <=2.6.3)
chainlit PYPI version =1.2.0, =0.1.0, =0.1.0, =0.1.3, =0.1.0, =0.1.0, =0.2.2, =0.0.0.1, =0.1.0 Source cves: CVE-2025-68492 Source advisory: MEND:CVE-2025-68492...
CVE-2025-68492
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
CVE-2025-68492: Authorization Bypass Through User-Controlled Key
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
Chainlit security vulnerabilities
Chainlit is a large model dialog interface framework open-sourced by chainlit. A security vulnerability exists in Chainlit versions prior to 2.8.5 that stems from the presence of an authorization bypass via a user control key, which could lead to an attacker logging in to view threads or gain...
PT-2026-6482
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...
PT-2026-2833
Name of the Vulnerable Software and Affected Versions Chainlit versions prior to 2.8.5 Description Chainlit versions prior to 2.8.5 have an authorization bypass due to a user-controlled key issue. Successful exploitation could allow an attacker to view threads or gain ownership of threads after...