Critical Chainlit AI Flaws Let Hackers Seize Control Of Cloud Environments

Zafran Labs disclosed two critical Chainlit vulnerabilities—CVE-2026-22218 (arbitrary file read) and CVE-2026-22219 (SSRF)—that attackers can exploit via the PUT /project/element endpoint to steal environment variables, API keys, LangChain chat databases, and cloud credentials (including AWS IMDSv1). The report includes technical exploitation steps, observed real-world exploitation, IoCs (request patterns, exposed files, Snort signature), CVSS estimates, and mitigations such as upgrading to Chainlit 2.9.4, blocking IMDSv1, and applying WAF rules.