CVE-2025-68492

EUVD-2026-2448
Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
jpcertCNA
4.2 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
chainlitchainlit
𝑥
< 2.8.5
CNA
Common Weakness Enumeration
References
https://github.com/Chainlit/chainlit/releases
https://jvn.jp/en/jp/JVN34964581/