{"data":{"id":"7a481ece-5c99-4a1c-917f-ea15e42d9c07","title":"GHSA-w3fx-mc44-mf6j: Chainlit has command injection via MCP stdio transport that allows unauthenticated remote code execution","summary":"Chainlit versions 2.4.0 through 2.11.x have a critical vulnerability in their MCP (Model Context Protocol) feature that allows unauthenticated attackers to execute arbitrary commands on the server. The vulnerability exists because the `/mcp` endpoint accepts user-controlled commands but only checks the executable name (like `npx`) against an allowlist, not the arguments passed to it, allowing attackers to use `npx -y -c 'ARBITRARY COMMAND'` to run malicious code with the server's privileges.","solution":"Upgrade to Chainlit version 2.12.0 (released 2026-08-25). This version removes the `fullCommand` parameter from client requests entirely; instead, MCP servers are now declared by developers in `.chainlit/config.toml` under `[[features.mcp.servers]]` and selected by name at connection time, so commands never cross from client to server and no sanitization vulnerability exists.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-w3fx-mc44-mf6j","publishedAt":"2026-08-25T19:19:28.000Z","cveId":"CVE-2026-45018","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["chainlit@>= 2.4.0rc0, <= 2.11.1 (fixed: 2.12.0)"],"affectedVendors":["LangChain"],"affectedVendorsRaw":["Chainlit"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0,"patchAvailable":true,"disclosureDate":"2026-08-25T19:19:28.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"api","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"]}}