CVE-2026-56104High· 8.2▾ TwilightChainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without owner…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 45.1 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Sep 21.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
critical → high
Last analysed / modified upstream
7.4 → 8.2
Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without ownership verification. Attackers can exploit the restore_existing_session path to assume a victim's permissions and roles, enabling unauthorized invocation of tools and access to data restricted to the authenticated victim.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
chainlit < 2.10.1Patched in:
chainlit 2.10.1Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-45018Critical· 9.8Chainlit is a Python framework for building production-ready conversational AI applications
CVE-2026-45019High· 7.2Chainlit is a Python framework for building production-ready conversational AI applications
CVE-2026-22219High· 7.7Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend
CVE-2025-68492Medium· 4.2Chainlit contains an authorization bypass vulnerability
CVE-2026-82290Medium· 5.3Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints
CVE-2026-86099High· 8.2Chainlit through 2.12.0 fails to validate the client-supplied socket.io sessionId parameter, allowing unauthenticated attackers to traverse filesystem paths by injecting absolute or relative path sequences