{"cve":"CVE-2026-22219","nvd":{"published":"2026-01-20T00:15:49.053","modified":"2026-10-08T16:17:11.260","status":"Analyzed","description":"Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","score":8.3},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","score":7.7},"cwes":["CWE-918"],"references":["https://github.com/Chainlit/chainlit/releases/tag/2.9.4","https://www.vulncheck.com/advisories/chainlit-sqlalchemy-data-layer-ssrf-via-project-element","https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover"],"products":["chainlit:chainlit"],"source":"nvd","synced_at":"2026-10-19T22:21:16.563232421+00:00"},"epss":{"cve":"CVE-2026-22219","score":0.05174,"percentile":0.92391,"date":"2026-10-25"},"kev":null,"osv":[{"id":"GHSA-2g59-m95p-pgfq","url":"https://osv.dev/vulnerability/GHSA-2g59-m95p-pgfq","summary":"Chainlit contain a server-side request forgery (SSRF) vulnerability","modified":"2026-07-07T17:57:22.370684872Z","packages":[{"ecosystem":"PyPI","name":"chainlit","purl":"pkg:pypi/chainlit","ranges":["<2.9.4"],"fixed":["2.9.4"]}]},{"id":"PYSEC-2026-1237","url":"https://osv.dev/vulnerability/PYSEC-2026-1237","summary":"Chainlit contain a server-side request forgery (SSRF) vulnerability","modified":"2026-07-07T17:47:24.627922727Z","packages":[{"ecosystem":"PyPI","name":"chainlit","purl":"pkg:pypi/chainlit","ranges":["<2.9.4"],"fixed":["2.9.4"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}