CVE-2026-82290 in Chainlitinfo

Zusammenfassung

von MITRE • 28.08.2026

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Zuständig

VulnCheck

Reservieren

28.08.2026

Veröffentlichung

28.08.2026

Moderieren

akzeptiert

Eintrag

VDB-396916

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

very low

Quellen

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-82290
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-82290
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-82290/

◂ ZurückÜbersichtWeiter ▸

Might our Artificial Intelligence support you?

Check our Alexa App!