danny-avila

Records52All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical8CVSS 9.0–10.0

CVSS high20CVSS 7.0–8.9

Exploited now

danny-avila records in CISA KEV

No danny-avila vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Librechat 51 records HIGH

Records

51 records in Librechat · all components

TI-2026-25134 CVE-2026-32625

LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

HIGH 76

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.02792 Published 2026-06-02 Fixed in 0.8.4-rc1 CWE-200

TI-2026-17862 CVE-2026-22252

LibreChat MCP Stdio Remote Command Execution

HIGH 76

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04223 Published 2026-01-12 Fixed in v0.8.2-rc2 CWE-285

TI-2026-38976 CVE-2026-54030

LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow

HIGH 75

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00168 Published 2026-06-25 Fixed in 0.8.5 CWE-346

TI-2024-27763 CVE-2024-41703 · GHSA-rg6c-frmf-w953

LibreChat through 0.7.4-rc1 has incorrect access control for message updates.

HIGH 75

LibreChat through 0.7.4-rc1 has incorrect access control for message updates.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00356 Published 2024-07-22 No fix listed CWE-284

TI-2024-10347 CVE-2024-11170 · GHSA-mq4w-5hp5-6g52

Path Traversal in danny-avila/librechat

HIGH 73

A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01814 Published 2025-03-20 Fixed in 0.7.6 CWE-29

TI-2026-25682 CVE-2026-33265 · GHSA-59wr-fjj3-mr2w

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

HIGH 72

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.00231 Published 2026-03-18 No fix listed CWE-669

TI-2025-42676 CVE-2025-69222

LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions

HIGH 72

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1CRITICAL 9.1 Network Low privileges No interaction EPSS 0.04593 Published 2026-01-07 No fix listed CWE-918

TI-2025-40705 CVE-2025-66201

LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability

HIGH 72

LibreChat is a ChatGPT clone with additional features.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00313 Published 2025-11-29 Fixed in 0.8.1-rc2 CWE-20

TI-2025-34602 CVE-2025-54868

LibreChat exposes arbitrary chats through Meilisearch engine

HIGH 72

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00517 Published 2025-08-05 Fixed in 0.7.7 CWE-285

TI-2024-10349 CVE-2024-11172 · GHSA-6827-g8xf-36c7

Denial of Service in danny-avila/librechat

HIGH 72

A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00935 Published 2025-03-20 Fixed in 0.7.6 CWE-248

TI-2024-10348 CVE-2024-11171 · GHSA-c2qr-w9p6-cxgr

Improper Input Validation in danny-avila/librechat

HIGH 72

In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00545 Published 2025-03-20 Fixed in 0.7.6 CWE-770

TI-2024-10346 CVE-2024-11169 · GHSA-gmqg-7635-v6cj

Unhandled Exception Leading to Server Crash in danny-avila/librechat

HIGH 72

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00935 Published 2025-03-20 Fixed in 0.7.6 CWE-115

TI-2024-09596 CVE-2024-10361 · GHSA-xcp6-jv5m-jwrm

Arbitrary File Deletion via Path Traversal in danny-avila/librechat

HIGH 72

An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01013 Published 2025-03-20 Fixed in 0.7.5 CWE-22

TI-2026-24489 CVE-2026-31943

LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP

HIGH 70

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00221 Published 2026-03-27 Fixed in 0.8.3 CWE-918

TI-2025-40882 CVE-2025-66450

LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload

HIGH 70

LibreChat is a ChatGPT clone with additional features.

CVSS 4.0HIGH 8.6 Network No auth User interaction EPSS 0.00213 Published 2025-12-11 Fixed in 0.8.1 CWE-80

TI-2026-38978 CVE-2026-54036

LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification

HIGH 68

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00383 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-306

TI-2026-38977 CVE-2026-54033

LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs

HIGH 67

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00352 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-918

TI-2026-24491 CVE-2026-31945

LibreChat Server-Side Request Forgery using DNS resolution

HIGH 67

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00259 Published 2026-03-27 Fixed in 0.8.3-rc1 CWE-918

TI-2026-24490 CVE-2026-31944

LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link

HIGH 66

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-306

TI-2025-08100 CVE-2025-8849 · GHSA-2q3x-64cr-5mp5

Denial of Service in danny-avila/librechat

HIGH 66

LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00347 Published 2025-10-30 Fixed in v0.8.0-rc2 CWE-400

TI-2026-32554 CVE-2026-44654

LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents

HIGH 65

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00265 Published 2026-06-02 Fixed in 0.8.5 CWE-863

TI-2024-10344 CVE-2024-11167 · GHSA-jw8w-84x3-c2r9

Improper Access Control in danny-avila/librechat

HIGH 65

An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to delete other users' prompts via the groupid parameter.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00559 Published 2025-03-20 Fixed in 0.7.6 CWE-639

TI-2026-38980 CVE-2026-54040

LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass

MEDIUM 64

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00258 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-306

TI-2026-24495 CVE-2026-31951

LibreChat's MCP Server Header Injection Enables OAuth Token Theft

MEDIUM 63

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00253 Published 2026-03-27 No fix listed CWE-200

TI-2026-38974 CVE-2026-54027

LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization

MEDIUM 62

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00324 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-862

Open these records in search →

Critical	8
High	20
Medium	23
Low	1
No CVSS	0