CVE-2026-22219
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.
| CWE | CWE-918 |
| Vendor | chainlit |
| Product | chainlit |
| Published | Jan 19, 2026 |
| Last Updated | Mar 5, 2026 |
Stay Ahead of the Next One
Get instant alerts for chainlit chainlit
Be the first to know when new unknown vulnerabilities affecting chainlit chainlit are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Chainlit / Chainlit
0 < 2.9.4
References
github.com: https://github.com/Chainlit/chainlit/releases/tag/2.9.4 zafran.io: https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeover vulncheck.com: https://www.vulncheck.com/advisories/chainlit-sqlalchemy-data-layer-ssrf-via-project-element
Credits
Ido Shani and Gal Zaban of Zafran Security