CVE-2026-22218

Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom Element with a user-controlled path value, causing the server to copy the referenced file into the attacker’s session. The resulting element identifier (chainlitKey) can then be used to retrieve the file contents via /project/file/<chainlitKey>, allowing disclosure of any file readable by the Chainlit service.

• CWE-22

• https://github.com/Chainlit/chainlit/releases/tag/2.9.4Product, Release Notes
• https://www.vulncheck.com/advisories/chainlit-arbitrary-file-read-via-project-elementThird Party Advisory
• https://www.zafran.io/resources/chainleak-critical-ai-framework-vulnerabilities-expose-data-enable-cloud-takeoverExploit, Mitigation, Third Party Advisory

Published

Jan 20, 2026

Last Modified

Jul 14, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-22212TinyOS versions up to and including 2.1.2 contain a stack-ba…4.8
• CVE-2026-22213RIOT OS versions up to and including 2026.01-devel-317 conta…9.8
• CVE-2026-22214RIOT OS versions up to and including 2026.01-devel-317 conta…9.8
• CVE-2026-22215wpDiscuz before 7.6.47 contains a cross-site request forgery…5.4
• CVE-2026-22216wpDiscuz before 7.6.47 contains a missing rate limiting vuln…5.3
• CVE-2026-22217OpenClaw version 2026.2.22 prior to 2026.2.23 contains an ar…6.1
• CVE-2026-22219Chainlit versions prior to 2.9.4 contain a server-side reque…7.7
• CVE-2026-2222A weakness has been identified in code-projects Online Revie…4.8
• CVE-2026-22220A lack of proper input validation in the HTTP processing pat…4.5
• CVE-2026-22221An OS Command Injection vulnerability in TP-Link Archer BE23…8
• CVE-2026-22222An OS Command Injection vulnerability in TP-Link Archer BE23…8
• CVE-2026-22223An OS Command Injection vulnerability in TP-Link Archer BE23…8