CVE-2026-120492

Chainlit version 2.12.0 is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause is that the validate_mcp_url function fails to reject the semicolon (;) character . Unauthenticated attackers can submit MCP URLs containing ..; segments to the /mcp endpoint. This allows them to by...