security1 distinct publisher
npx -c slips arbitrary commands past Chainlit's MCP executable allowlist
The POST /mcp endpoint took a command string from any client that could open a session and checked only the program name against an allowlist. Chainlit 2.12.0 stops accepting the command at all.
Publishers:github.com
Reality
- Evidence76
- Adoption
- Insufficient
- Hype gap−12
- Incentives60
- Confidence