EUVD-2026-115226

Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowedurls entries because validatemcpurl does not reject the semicolon character. Attackers can submit MCP URLs with '..;' segments to the /mcp endpoint, causing...

CVE-2026-120492

Chainlit version 2.12.0 is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause is that the validate_mcp_url function fails to reject the semicolon (;) character . Unauthenticated attackers can submit MCP URLs containing ..; segments to the /mcp endpoint. This allows them to by...