Chainlit Server-Side Request Forgery Vulnerability in SQLAlchemy Data Layer

A server-side request forgery (SSRF) vulnerability exists in Chainlit versions prior to 2.9.4, specifically within the SQLAlchemy data layer backend. The issue arises during the '/project/element' update process, where an authenticated client can input a user-controlled URL. This URL is then fetched via an outbound HTTP GET request, allowing attackers to make arbitrary requests from the Chainlit server to internal network services or cloud metadata endpoints. The responses can be stored using the configured storage provider.

Impact

Exploitation of this vulnerability allows for server-side request forgery, enabling attackers to make unauthorized HTTP requests from the Chainlit server to internal services or cloud metadata endpoints, potentially leading to the exposure of sensitive information or manipulation of internal services.

Remediation

Users are advised to update to Chainlit version 2.9.4 or later, where this vulnerability has been fixed.