CVE-2026-82290 - Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation. - 漏洞详情

漏洞编号：CVE-2026-82290

风险等级：中危

漏洞来源：CVE

CVE 编号：CVE-2026-82290

CNNVD 编号：-

厂商/产品：- / -

影响范围：-

CWE：CWE-639

发布/更新时间：2026-08-28 / 2026-08-28

漏洞描述

Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation.

CVE-2026-82290 - Chainlit through 2.12.0 fails to validate ownership of feedback records in PUT and DELETE endpoints. Authenticated attackers can delete or modify other users' feedback by supplying arbitrary feedback identifiers, corrupting human-rating data used for model evaluation. - 漏洞详情

漏洞描述

相关链接

相关漏洞