Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Chainlit/chainlit

              main @ 190ea74
            

Fixes

CVEs

CRITICAL

Peak severity

32.0%

Coverage

Highlights

Auth Bypass: 13 prior fixes. Scrutinize any change in this area.

backend/chainlit/server.py: most-fixed (7 issues). Treat as high-risk during review.

25 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Multiple websocket and HTTP endpoints lacked proper user/thread ownership validation, allowing unauthorized access to conversations, threads, and files. Fixes added checks but some were incomplete or introduced new bypasses.

Path Traversal: File serving and markdown/translation reads used unsanitized client-supplied paths, enabling arbitrary file read. Fixes added path canonicalization and containment checks, but multiple distinct entry points were affected.

Command Injection / SSRF: MCP stdio transport allowed client-supplied full commands and outbound HTTP to arbitrary URLs, leading to remote code execution and SSRF. Fixes moved command declaration to server config and added URL/header allowlists.