Chainlit Authorization Bypass Vulnerability Allowing Unauthorized Thread Access
Vulnerability
An authorization bypass vulnerability has been identified in Chainlit versions prior to 2.8.5. This vulnerability allows logged-in users to manipulate user-controlled keys to bypass access restrictions, potentially leading to unauthorized viewing of threads or acquisition of thread ownership.
Impact
Exploitation of this vulnerability allows an attacker to view threads or gain ownership of threads in the application.
Remediation
Users are advised to update Chainlit to version 2.8.5 or later.
Added: Jan 14, 2026, 7:32 AM
Updated: Jan 14, 2026, 7:32 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.4exploitability
5.2remediation
0.0relevance
2.0threat
0.0urgency
2.9incentive
0.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.