https://vulnerability.circl.lu/sightings/feed 2026-08-30T17:30:34.286656+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/c5d4de7a-ba98-4019-89bd-c90d16bbe471/export 2026-08-30T17:30:34.316664+00:00 Automation user https://vulnerability.circl.lu/user/automation {"uuid": "c5d4de7a-ba98-4019-89bd-c90d16bbe471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-45019", "type": "seen", "source": "https://gist.github.com/alon710/cd9e29ae1307bd41a5c652b5662f31b2", "content": "# CVE-2026-45019: CVE-2026-45019: Server-Side Request Forgery (SSRF) in Chainlit MCP Endpoint\n\n> **CVSS Score:** 7.2\n> **Published:** 2026-08-25\n> **Full Report:** https://cvereports.com/reports/CVE-2026-45019\n\n## Summary\nAn unauthenticated server-side request forgery (SSRF) vulnerability exists in Chainlit versions >= 2.4.0rc0 and < 2.12.0 when the Model Context Protocol (MCP) features are enabled. This vulnerability allows remote, unauthenticated attackers to force the backend application server to initiate arbitrary HTTP/HTTPS connections to internal subnets, localhost endpoints, or cloud metadata infrastructure.\n\n## TL;DR\nUnauthenticated attackers can abuse the Model Context Protocol (MCP) endpoint in Chainlit to execute arbitrary HTTP requests to internal networks and local interfaces.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-918\n- **Attack Vector**: Network\n- **CVSS**: 7.2\n- **EPSS**: Not Available\n- **Impact**: Server-Side Request Forgery (SSRF)\n- **Exploit Status**: PoC\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- Chainlit server deployments with features.mcp.enabled = true\n- **Chainlit**: >= 2.4.0rc0, < 2.12.0 (Fixed in: `2.12.0`)\n\n## Mitigation\n\n- Upgrade Chainlit to version 2.12.0 or later\n- Disable the Model Context Protocol (MCP) in the config file if not required\n- Implement local egress firewall rules blocking requests to 127.0.0.1 and 169.254.169.254\n- Ensure authentication is required to access the Chainlit interface\n\n**Remediation Steps:**\n1. Review `.chainlit/config.toml` and set `features.mcp.enabled = false`.\n2. Update the project dependencies using `pip install --upgrade chainlit` to fetch version 2.12.0.\n3. Restrict outbound network traffic from the application container using firewall software.\n\n## References\n\n- [GHSA-hvfh-5mj3-5f3j Security Advisory](https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j)\n- [SPL-2026-002: Chainlit Security Advisory Document](https://github.com/Chainlit/chainlit/blob/2.12.0/docs/security-advisory-2026-mcp.md#spl-2026-002--ssrf-via-mcp-streamable-http--sse)\n- [Chainlit v2.12.0 Release Changelog](https://github.com/Chainlit/chainlit/releases/tag/2.12.0)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-45019) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-08-25T22:31:31.549837Z"} 2026-08-25T22:31:31.549837+00:00 https://vulnerability.circl.lu/sighting/3af891d0-132c-48a9-8601-6683e927ee99/export 2026-08-30T17:30:34.318555+00:00 Joseph Lee https://vulnerability.circl.lu/user/syspect {"uuid": "3af891d0-132c-48a9-8601-6683e927ee99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-45019", "type": "published-proof-of-concept", "source": "https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j", "content": "", "creation_timestamp": "2026-08-25T20:35:05.655781Z"} 2026-08-25T20:35:05.655781+00:00