{"affected":[{"defaultStatus":"unaffected","ecosystem":"pypi","packageName":"chainlit","product":"Chainlit","source":"CNA: VulnCheck","vendor":"Chainlit","versions":[{"status":"affected","version":"2.12.0","versionType":"semver"}]}],"cveId":"CVE-2026-120492","cwes":["CWE-918"],"description":"Chainlit 2.12.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass path-scoped MCP allowed_urls entries because validate_mcp_url does not reject the semicolon character. Attackers can submit MCP URLs with '..;' segments to the /mcp endpoint, causing requests to paths outside the operator's grant on origins that strip semicolon path parameters.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":6.3,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","version":"4.0"},{"score":5.4,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1793629760711,"publishedAt":1793629760711,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/Chainlit/chainlit/security/advisories/GHSA-hvfh-5mj3-5f3j"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/Chainlit/chainlit/blob/2.12.0/backend/chainlit/mcp.py#L90-L177"},{"source":"CNA: VulnCheck","tags":["technical-description"],"url":"https://github.com/Chainlit/chainlit/blob/2.12.0/backend/chainlit/mcp.py#L199-L208"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/chainlit-2.12.0-ssrf-via-semicolon-path-segment-in-mcp-allowed-urls"}],"remediation":[],"revision":"5b612bf8b68906bd327f37681131eb6587cc093474246f8e8b5c5e931ec3c09b","sources":[{"modifiedAt":1793629760711,"name":"CNA: VulnCheck","retrievedAt":1793632139995,"url":"https://www.cve.org/CVERecord?id=CVE-2026-120492"}],"ssvc":null,"status":"published","title":"Chainlit 2.12.0 SSRF via Semicolon Path Segment in MCP allowed_urls","updatedAt":1793632139995}