CVE-2026-45018: Chainlit MCP stdio unauthenticated RCE (and sibling CVE-2026-45019) August 31, 2026 · Dev.to Read full story at source