ChainLeak -- Chainlit AI Framework Vulnerabilities (CVE-2026-22218 & CVE-2026-22219)
Date: 2026-01
Affected: ChainLeak
Attack vector: ssrf
Category: real-world
Severity: Medium
CVE: CVE-2026-22218
CVE-2026-22219

Arbitrary file read (CVE-2026-22218) allows reading /proc/self/environ to steal API keys and credentials. SSRF (CVE-2026-22219) allows requests to internal services or cloud metadata endpoints. On AWS EC2 with IMDSv1, enables cloud account takeover. Fixed in Chainlit v2.9.4.


Mitigations:

Architectural layers (MAESTRO):