Skip to content
OpenAdvisories

Vendor

Chainlit

9 known vulnerabilities.

Products

Chainlit 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-45018

    Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution

    Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployments with features.mcp.enabled set to true in .chainlit/config.toml expose the POST /mcp endpoint without requiring authen…

    Chainlit Chainlit chainlit PyPI