Executive brief
Chainlit contains an authorization bypass vulnerability
Affected products
- PyPI chainlit
Junglewise Threat Intelligence
CVE-2025-68492: PYSEC-2026-1238 - Chainlit contains an authorization bypass vulnerability
CVE-2025-68492 · Severity: low · CVSS 3 · Published 2026-07-07
Technologies: chainlit (PyPI). Vendors: PyPI.
Related threats
- Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployment
- Chainlit is a Python framework for building production-ready conversational AI applications. From 2.4.0rc0 until 2.12.0, Chainlit deployment
- Chainlit SSRF in project element update flow
- Chainlit arbitrary file read in project element update flow