VULNERABILITIES THREATEN TO BREAK CHAINLIT AI FRAMEWORK

Summary from the TLDR InfoSec newsletter

Zafran Security disclosed two high-severity vulnerabilities in Chainlit, an open-source AI chatbot framework with over 200,000 weekly PyPI downloads. CVE-2025-22218 (CVSS 7.7) enables arbitrary file reads via the custom elements API, while CVE-2026-21219 (CVSS 7.0) is an SSRF flaw affecting SQLAlchemy implementations. Combined exploitation could allow attackers to steal AWS credentials from EC2 instances running IMDSv1 and achieve cloud account takeover. Version 2.9.4 patches both vulnerabilities.