Description
Chainlit before 2.10.1 contains a session hijacking vulnerability that allows unauthenticated attackers to restore and inherit authenticated user sessions by presenting a valid sessionId during WebSocket session restoration without ownership verification. Attackers can exploit the restore_existing_session path to assume a victim-s permissions and roles, enabling unauthorized invocation of tools and access to data restricted to the authenticated victim.
CVSS 7.4EPSS 0.256%Risque 0.76
Voir la source- Publication
- 2026-06-22 16:16:40
- Versions concernées
- <2.10.1
- Type
- Application web
- Vecteur
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N