CH
Product
chainlit
by Chainlit · last CVE Sep 9, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 4Medium 3Low 0
Watch

Add chainlit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45018
9.8
1%
Aug 25
Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution
Affected: >= 2.4.0rc0, < 2.12.0
Showing 1