Skip to content
Threat Feed
Subscribe

Product

Chainlit (2.4.0rc0 - 2.11.1)

1 brief RSS
high advisory

Unauthenticated SSRF in Chainlit MCP Component

Chainlit versions 2.4.0rc0 through 2.11.1 contain an unauthenticated SSRF vulnerability (CVE-2026-45019) in the Model Context Protocol (MCP) component, allowing attackers to perform internal network reconnaissance and interact with internal APIs using attacker-controlled HTTP headers.

Chainlit ssrf mcp cve-2026-45019
1r 1t 1c