CVE-2026-22219: Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element
Chainlit versions prior to 2.9.4 contain a server-side request forgery (SSRF) vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy element creation logic using an outbound HTTP GET request. This allows an attacker to make arbitrary HTTP requests from the Chainlit server to internal network services or cloud metadata endpoints and store the retrieved responses via the configured storage provider.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
pip/chainlitto a version that resolves this vulnerability.Fixed in 2.9.4 - Upgrade
Upgrade
chainlitto a version that resolves this vulnerability.Fixed in 2.9.4 - Compensating control
If immediate upgrade is not possible, restrict outbound HTTP GET access from the Chainlit server to prevent SSRF to internal network services or cloud metadata endpoints.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-22219?
CVE-2026-22219 is classified as a high severity vulnerability due to its potential impact on server security.
How do I fix CVE-2026-22219?
To address CVE-2026-22219, upgrade Chainlit to version 2.9.4 or later.
What does CVE-2026-22219 affect?
CVE-2026-22219 affects Chainlit versions prior to 2.9.4 when using the SQLAlchemy data layer backend.
What type of vulnerability is CVE-2026-22219?
CVE-2026-22219 is a server-side request forgery (SSRF) vulnerability.
What is the impact of CVE-2026-22219?
The impact of CVE-2026-22219 allows an authenticated client to manipulate server requests, potentially leading to data exposure.