Medium severity · published Jan 14, 2026
CVE-2025-68492
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability
4.2
CVSS
0.2%
EPSS
No
On KEV
Description
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack vector
Network
Complexity
High
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chainlit · Chainlit
prior to 2.8.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-68492
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-68492
github.com
https://github.com/Chainlit/chainlit/releases
jvn.jp
https://jvn.jp/en/jp/JVN34964581/
More from Chainlit
9.8
CVE-2026-45018
Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution
8.2
CVE-2026-86099
Chainlit through 2.12.0 Path Traversal via socket.io sessionId
8.2
CVE-2026-56104
Chainlit < 2.10.1 Session Hijacking via WebSocket Session Restoration
7.7
CVE-2026-22219
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element
7.2
CVE-2026-45019
Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access