Chainlit AI Framework Flaws Enable Data Theft via File Read and SSRF Bugs
Zafran Security found two high-severity flaws in the open-source Chainlit AI framework, collectively called ChainLeak, that allow arbitrary file reads and server-side request forgery against servers hosting AI applications. The file-read bug...