CVE-2026-86099— Chainlit through 2.12.0 Path Traversal via socket.io sessionId
Quick assessment
Affected
Chainlit chainlit
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Chainlit 2.12.0 及更早版本未能验证客户端提供的 socket.io sessionId 参数，使得未认证的攻击者能够通过注入绝对路径或相对路径序列来实现文件系统路径穿越。攻击者可以构造恶意的 sessionId 值，从而逃逸出上传目录，并递归删除服务进程可访问的任意目录。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86099
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Chainlit through 2.12.0 Path Traversal via socket.io sessionId
Source: CVE Program / CVE List V5
Vulnerability Description
Chainlit through 2.12.0 fails to validate the client-supplied socket.io sessionId parameter, allowing unauthenticated attackers to traverse filesystem paths by injecting absolute or relative path sequences. Attackers can craft malicious sessionId values that escape the upload directory and recursively delete arbitrary directories accessible to the service process.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-86099
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86099
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-86099 (1)
Vendor Advisories for CVE-2026-86099 (1)
Vendor Pages for CVE-2026-86099 (1)
-
🔗 chainlit · PyPI product
Other References for CVE-2026-86099 (2)
IV. Related Vulnerabilities
Same product: chainlit
-
CVE-2026-82290
Chainlit Feedback Endpoints Missing Ownership Validation -
CVE-2026-45019
Chainlit: SSRF via MCP SSE and streamable-http transports al -
CVE-2026-45018
Chainlit: Command injection via MCP stdio transport allows u -
CVE-2026-56104
Chainlit < 2.10.1 Session Hijacking via WebSocket Session Re -
CVE-2026-22219
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/ele
Same vendor: Chainlit
-
CVE-2026-82290
Chainlit Feedback Endpoints Missing Ownership Validation -
CVE-2026-45019
Chainlit: SSRF via MCP SSE and streamable-http transports al -
CVE-2026-45018
Chainlit: Command injection via MCP stdio transport allows u -
CVE-2026-56104
Chainlit < 2.10.1 Session Hijacking via WebSocket Session Re -
CVE-2026-22219
Chainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/ele
Same weakness: CWE-22
-
CVE-2026-88069
Path traversal in Pandora archive extractor allows arbitrary -
CVE-2026-53956
Rattler vulnerable to package cache path traversal via conda -
CVE-2026-86775
knowns before 0.30.0 Path Traversal via Document API -
CVE-2026-78485
Dell SCG 5.0 路径遍历致未授权访问 -
CVE-2026-19729
Keycloak-services: keycloak-services: incomplete fix for arb
V. Comments for CVE-2026-86099
No comments yet