TI-2025-05498 Aliases CVE-2025-6088 GHSA-9g7r-h55w-795g

Improper Authorization in danny-avila/librechat

LOW 15CWE-285Published 2025-09-11 · Updated 2025-09-11

Key facts

Attack vector: Network
Privileges required: Low
User interaction: None
Attack complexity: High
Impact type: Security bypass
Confidentiality · integrity · availability: Low · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-285.

Summary

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they can be obtained from less-protected sources such as server-side access logs, browser history, or screenshots. The vulnerability permits a logged-in user to gain read-only access to another user's conversations by exploiting the `/api/share/conversationID` endpoint, which lacks authorization checks. This issue is resolved in version v0.7.9-rc1.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00311 24th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed danny-avila/librechat (danny-avila): v0.7.9-rc1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
danny-avila	danny-avila/librechat	before v0.7.9-rc1	v0.7.9-rc1	Patch available	CNA

danny-avila/librechat Vendordanny-avila Affected before v0.7.9-rc1 Fixed in v0.7.9-rc1 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:librechat:librechat:0.7.8:-::::::	0.7.8	Vulnerable	danny-avila
cpe:2.3:a:librechat:librechat:0.7.8:rc1::::::	0.7.8 rc1	Vulnerable	danny-avila

cpe:2.3:a:librechat:librechat:0.7.8:-:*:*:*:*:*:* Versions 0.7.8 Vulnerable ·danny-avila
cpe:2.3:a:librechat:librechat:0.7.8:rc1:*:*:*:*:*:* Versions 0.7.8 rc1 Vulnerable ·danny-avila

Remediation

Fix · CNA danny-avila/librechat (danny-avila) Fixed in v0.7.9-rc1

Timeline

2026-10-02 Threatist record created from CVE-2025-6088
2026-10-03 Alias added: GHSA-9g7r-h55w-795g

References

Exploit 1

https://huntr.com/bounties/361405bb-a739-41eb-a680-4cb6193e7c76

Patch 1

https://github.com/danny-avila/librechat/commit/3af2666890bbf291cb7b9f3e03592d54714f0ff5

TI-2026-25134 LibreChat Exfiltrates Server Secrets via MCP Server URL Injection CVSS 3.1CRITICAL 9.6
TI-2026-17862 LibreChat MCP Stdio Remote Command Execution CVSS 3.1CRITICAL 9.9
TI-2026-38976 LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow CVSS 3.1CRITICAL 9.3
TI-2024-27763 LibreChat through 0.7.4-rc1 has incorrect access control for message updates. CVSS 3.1CRITICAL 9.8
TI-2024-10347 Path Traversal in danny-avila/librechat CVSS 3.0HIGH 8.8
TI-2026-25682 In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API. CVSS 3.1CRITICAL 9.0

See all 50 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences