https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T00:13:45.418370+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-265834 EUVD-2026-265834 2026-10-08T00:13:45.421530+00:00 EUVD-2026-265834 https://cve.radiocsirt.org/vuln/fkie_cve-2025-68492 fkie_cve-2025-68492 2026-10-08T00:13:45.421583+00:00

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.

 https://cve.radiocsirt.org/vuln/ghsa-v492-6xx2-p57g GHSA-v492-6xx2-p57g — Chainlit contains an authorization bypass vulnerability 2026-10-08T00:13:45.421617+00:00

Affected: PyPI: chainlit

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000006 jvndb-2026-000006 2026-10-08T00:13:45.421642+00:00

Chainlit provided by Chainlit contains the following vulnerability.<ul><li>Authorization bypass through user-controlled key (CWE-639) - CVE-2025-68492</li></ul>Shotaro Kimura of NRI SecureTechnologies, Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/pysec-2026-1238 PYSEC-2026-1238 — Chainlit contains an authorization bypass vulnerability 2026-10-08T00:13:45.421662+00:00

Affected: PyPI: chainlit

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.