{"metadata": {"vulnerability": "CVE-2026-45019", "count": 16, "kinds": {"milestone": 5, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-05-08T16:58:28.895Z", "date_only": false, "value": "2026-05-08T16:58:28.895Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-08-25T19:20:59.339Z", "date_only": false, "value": "2026-08-25T19:20:59.339Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-25T19:20:59.339Z", "date_only": false, "value": "2026-08-25T19:20:59.339Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2026-45019", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-25T19:21:40Z", "date_only": false, "value": "2026-08-25T19:21:40Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-HVFH-5MJ3-5F3J", "record": "GHSA-HVFH-5MJ3-5F3J", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-25T19:21:40Z", "date_only": false, "value": "2026-08-25T19:21:40Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-HVFH-5MJ3-5F3J", "record": "GHSA-HVFH-5MJ3-5F3J", "field": "modified"}, {"timestamp": "2026-08-25T20:16:55.910Z", "date_only": false, "value": "2026-08-25T20:16:55.910", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-45019", "record": "FKIE_CVE-2026-45019", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-08-25T20:35:05.655Z", "date_only": false, "value": "2026-08-25T20:35:05.655781Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "record": "CVE-2026-45019", "field": "creation_timestamp", "uuid": "3af891d0-132c-48a9-8601-6683e927ee99", "url": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, {"timestamp": "2026-08-25T22:31:31.549Z", "date_only": false, "value": "2026-08-25T22:31:31.549837Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/cd9e29ae1307bd41a5c652b5662f31b2", "record": "CVE-2026-45019", "field": "creation_timestamp", "uuid": "c5d4de7a-ba98-4019-89bd-c90d16bbe471", "content": "# CVE-2026-45019: CVE-2026-45019: Server-Side Request Forgery (SSRF) in Chainlit MCP Endpoint\n\n> **CVSS Score:** 7.2\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-45019\n\n## Summary\nAn unauthenticated server-side request forgery (SSRF) vulnerability exists in Chainlit versions >= 2.4.0rc0 and < 2.12.0 when the Model Context Protocol (MCP) features are enabled. This vulnerability allows remote, unauthenticated attackers to force the backend application server to initiate arbitrary HTTP/HTTPS connections to internal subnets, localhost endpoints, or cloud metadata infrastructure.\n\n## TL;DR\nUnauthenticated attackers can abuse the Model Context Protocol (MCP) endpoint in Chainlit to execute arbitrary HTTP requests to internal networks and local interfaces.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS**: 7.2\n- **EPSS**: Not Available\n- **Impact**: Server-Side Request Forgery (SSRF)\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Chainlit server deployments with features.mcp.enabled = true\n- **Chainlit**: >= 2.4.0rc0, < 2.12.0 (Fixed in: `2.12.0`)\n\n## Mitigation\n\n- Upgrade Chainlit to version 2.12.0 or later\n- Disable the Model Context Protocol (MCP) in the config file if not required\n- Implement local egress firewall rules blocking requests to 127.0.0.1 and 169.254.169.254\n- Ensure authentication is required to access the Chainlit interface\n\n**Remediation Steps:**\n1. Review `.chainlit/config.toml` and set `features.mcp.enabled = false`.\n2. Update the project dependencies using `pip install --upgrade chainlit` to fetch version 2.12.0.\n3. Restrict outbound network traffic from the application container using firewall software.\n\n## References\n\n- [GHSA-hvfh-5mj3-5f3j Security Advisory](https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j)\n- [SPL-2026-002: Chainlit Security Advisory Document](https://github.com/Chainlit/chainlit/blob/2.12.0/docs/security-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse)\n- [Chainlit v2.12.0 Release Changelog](https://github.com/Chainlit/chainlit/releases/tag/2.12.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-45019) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/cd9e29ae1307bd41a5c652b5662f31b2"}, {"timestamp": "2026-08-27T13:54:59.266Z", "date_only": false, "value": "2026-08-27T13:54:59.266525Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-45019", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-08-27T13:54:59.266Z", "date_only": false, "value": "2026-08-27T13:54:59.266525Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-45019", "record": "FKIE_CVE-2026-45019", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-08-27T14:35:27.308Z", "date_only": false, "value": "2026-08-27T14:35:27.308Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-27T14:35:27.308Z", "date_only": false, "value": "2026-08-27T14:35:27.308Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-45019", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-31T04:53:53.661Z", "date_only": false, "value": "2026-08-31T04:53:53.661609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/targetsocialmedia.bsky.social/post/3mue4ffmvna2x", "record": "CVE-2026-45019", "field": "creation_timestamp", "uuid": "0d719996-c4ec-4346-b064-2a2b8a38ef29", "content": "CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019)", "url": "https://bsky.app/profile/targetsocialmedia.bsky.social/post/3mue4ffmvna2x"}, {"timestamp": "2026-09-09T21:07:31.353Z", "date_only": false, "value": "2026-09-09T21:07:31.353", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-45019", "record": "FKIE_CVE-2026-45019", "field": "lastModified"}, {"timestamp": "2026-09-10T09:44:56.911Z", "date_only": false, "value": "2026-09-10T09:44:56.911091Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-3811", "record": "PYSEC-2026-3811", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-09-10T11:02:00.015Z", "date_only": false, "value": "2026-09-10T11:02:00.015764Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-3811", "record": "PYSEC-2026-3811", "field": "modified"}], "metrics": {"as_of": "2026-10-29T21:44:07.478Z", "anchors": {"origin": {"timestamp": "2026-08-25T19:20:59.339Z", "date_only": false, "value": "2026-08-25T19:20:59.339Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-08-25T19:20:59.339Z", "date_only": false, "value": "2026-08-25T19:20:59.339Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": {"timestamp": "2026-08-25T20:35:05.655Z", "date_only": false, "value": "2026-08-25T20:35:05.655781Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "record": "CVE-2026-45019", "field": "creation_timestamp", "uuid": "3af891d0-132c-48a9-8601-6683e927ee99", "url": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": true, "seconds": 4446.316, "hours": 1.2350877777777778, "days": 0.05146199074074074, "min_seconds": 4446.316, "max_seconds": 4446.316, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-25T19:20:59.339Z", "date_only": false, "value": "2026-08-25T19:20:59.339Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-08-25T20:35:05.655Z", "date_only": false, "value": "2026-08-25T20:35:05.655781Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "record": "CVE-2026-45019", "field": "creation_timestamp", "uuid": "3af891d0-132c-48a9-8601-6683e927ee99", "url": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 5624588.13941, "hours": 1562.3855942805556, "days": 65.09939976168982, "min_seconds": 5624588.13941, "max_seconds": 5624588.13941, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-25T19:20:59.339Z", "date_only": false, "value": "2026-08-25T19:20:59.339Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-45019", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-10-29T21:44:07.478Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": true, "seconds": 5620141.82341, "hours": 1561.1505065027777, "days": 65.04793777094908, "min_seconds": 5620141.82341, "max_seconds": 5620141.82341, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-08-25T20:35:05.655Z", "date_only": false, "value": "2026-08-25T20:35:05.655781Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "record": "CVE-2026-45019", "field": "creation_timestamp", "uuid": "3af891d0-132c-48a9-8601-6683e927ee99", "url": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "metric_role": "exploit_publication", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-10-29T21:44:07.478Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}}}