CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019)By RepublisherAugust 31, 2026 Originally published at HOL Chainlit 2.12.0 (2026-08-25) closes two bugs on /mcp. CVE-2026-45018 is unauthenticated command execution via the MCP…
