Skip to content
Threat Feed
Subscribe

Product

Chainlit (<= 2.12.0)

1 brief RSS
high advisory

Path Traversal and Arbitrary Deletion in Chainlit

Chainlit versions 2.12.0 and earlier are vulnerable to an unauthenticated path traversal attack via the socket.io sessionId parameter, enabling arbitrary directory deletion.

Chainlit web-vulnerability path-traversal arbitrary-deletion
1r 1t 1c