PT-2026-3515 · Chainlit · Chainlit

Gal Zaban + 1 · CVE-2026-22218 · Published 2026-01-19 · Updated 2026-01-23

Positive Technologies (AI Summary)

CVSS v4.0

7.1

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Chainlit versions prior to 2.9.4

Description Chainlit versions prior to 2.9.4 have an arbitrary file read issue in the /project/element update process. An authenticated client can manipulate a custom Element with a user-controlled path, leading the server to copy the specified file into the attacker’s session. The resulting element identifier (chainlitKey) can then be used to retrieve the file contents through the /project/file/<chainlitKey> API endpoint, potentially exposing any file accessible by the Chainlit service. This allows unauthorized disclosure of sensitive information like configuration files, databases, or source code.

Recommendations Versions prior to 2.9.4 should be updated to version 2.9.4 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-22218

PYSEC-2026-598

Affected Products

Chainlit

References · 24

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22218.json · Exploit
• 🔥 https://zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover · Exploit
• https://github.com/Chainlit/chainlit/releases/tag/2.9.4 · Patch
• https://osv.dev/vulnerability/CVE-2026-22218 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2026-598 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22218 · Security Note
• https://github.com/Chainlit/chainlit · Note
• https://twitter.com/ritzsec/status/2014725203239317888 · Twitter Post
• https://twitter.com/securityRSS/status/2013915450984354111 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2013511172197097625 · Twitter Post
• https://twitter.com/KirillGavr75994/status/2013647353220157920 · Twitter Post
• https://vulncheck.com/advisories/chainlit-arbitrary-file-read-via-project-element · Note
• https://twitter.com/TweetThreatNews/status/2014435451206082956 · Twitter Post
• https://twitter.com/ThreatSynop/status/2013960232251142489 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1qi9nkn/chainlit_vulnerabilities_risk_major_data_leaks · Reddit Post