PyPI/chainlit CVE-2025-68492: medium 4.2, EPSS 0.22%

Chainlit contains an authorization bypass vulnerability

Action: Upgrade chainlit to 2.8.5 or later.

pip install chainlit==2.8.5

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1238
• https://nvd.nist.gov/vuln/detail/CVE-2025-68492
• https://github.com/Chainlit/chainlit/pull/2637
• https://github.com/Chainlit/chainlit/commit/8f1153db439eca58ae5c50c8276ba6fdd311448e
• https://github.com/Chainlit/chainlit
• https://github.com/Chainlit/chainlit/releases
• https://github.com/Chainlit/chainlit/releases/tag/2.8.5
• https://jvn.jp/en/jp/JVN34964581
• https://pypi.org/project/chainlit
• https://github.com/advisories/GHSA-v492-6xx2-p57g

CVE-2025-68492 · published 2026-07-07T16:03:18.754455Z · modified 2026-07-07T17:47:24.610200544Z · JSON