PT-2026-2833 · Chainlit · Chainlit

Published 2026-01-14 · Updated 2026-01-14 · CVE-2025-68492

NVD

CVSS v3.1

4.2

4.2

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-68492

Affected Products

Chainlit

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-68492 · Security Note
• https://github.com/Chainlit/chainlit/releases · Note
• https://jvn.jp/en/jp/JVN34964581 · Note