Chainlit POST /mcp stdio: No Argument Inspection → Process-User RCE
中文摘要
Chainlit 的 POST /mcp stdio 接口因缺乏 fullCommand 参数检查，存在远程代码执行 (RCE) 漏洞。
English Summary
Chainlit's POST /mcp stdio endpoint is vulnerable to RCE due to insufficient argument inspection on fullCommand.
Original Excerpt
*Chainlit POST /mcp stdio is the boundary: no argument inspection on fullCommand — missing authentication, a default-open bind, or a… Continue reading on Medium »