Vulnerabilities

TI-2026-38972 CVE-2026-54024

LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits

MEDIUM 62

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00444 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-770

TI-2026-38973 CVE-2026-54025

LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview

MEDIUM 58

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00239 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-79

TI-2026-38974 CVE-2026-54027

LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization

MEDIUM 62

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00324 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-862

TI-2026-38975 CVE-2026-54029

LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter

LOW 29

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00272 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-862

TI-2026-38977 CVE-2026-54033

LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs

HIGH 67

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00352 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-918

TI-2026-38979 CVE-2026-54037

LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork

LOW 29

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00512 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-770

TI-2026-38976 CVE-2026-54030

LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow

HIGH 75

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1CRITICAL 9.3 Network No auth User interaction EPSS 0.00168 Published 2026-06-25 Fixed in 0.8.5 CWE-346

TI-2026-38980 CVE-2026-54040

LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass

MEDIUM 64

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00258 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-306

TI-2026-38978 CVE-2026-54036

LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification

HIGH 68

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00383 Published 2026-06-25 Fixed in 0.8.4-rc1 CWE-306

TI-2026-32554 CVE-2026-44654

LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents

HIGH 65

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 4.0MEDIUM 5.7 Network Low privileges No interaction EPSS 0.00265 Published 2026-06-02 Fixed in 0.8.5 CWE-863

TI-2026-32553 CVE-2026-44653

LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets

MEDIUM 62

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00276 Published 2026-06-02 Fixed in 0.8.4 CWE-201

TI-2026-25134 CVE-2026-32625

LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

HIGH 76

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.02792 Published 2026-06-02 Fixed in 0.8.4-rc1 CWE-200

TI-2026-24488 CVE-2026-31942

LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys

LOW 31

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00206 Published 2026-06-02 Fixed in 0.8.3-rc1 CWE-862

TI-2026-26657 CVE-2026-34371

LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal

MEDIUM 61

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00269 Published 2026-04-07 Fixed in 0.8.4 CWE-22

TI-2026-24495 CVE-2026-31951

LibreChat's MCP Server Header Injection Enables OAuth Token Theft

MEDIUM 63

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1MEDIUM 6.8 Network Low privileges User interaction EPSS 0.00253 Published 2026-03-27 No fix listed CWE-200

TI-2026-24494 CVE-2026-31950

LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats

MEDIUM 57

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00217 Published 2026-03-27 Fixed in 0.8.2 CWE-284

TI-2026-24491 CVE-2026-31945

LibreChat Server-Side Request Forgery using DNS resolution

HIGH 67

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00259 Published 2026-03-27 Fixed in 0.8.3-rc1 CWE-918

TI-2026-24489 CVE-2026-31943

LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP

HIGH 70

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00221 Published 2026-03-27 Fixed in 0.8.3 CWE-918

TI-2026-25682 CVE-2026-33265 · GHSA-59wr-fjj3-mr2w

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

HIGH 72

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

CVSS 3.1CRITICAL 9.0 Adjacent network Low privileges No interaction EPSS 0.00231 Published 2026-03-18 No fix listed CWE-669

TI-2025-27504 CVE-2025-41258 · GHSA-jhr8-wf3f-76ph

LibreChat RAG API Authentication Bypass

LOW 37

LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG API.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00342 Published 2026-03-18 No fix listed CWE-284

TI-2026-03721 CVE-2026-4276 · GHSA-hx3h-9mjj-5pmg

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

LOW 39

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00288 Published 2026-03-16 No fix listed CWE-94

TI-2026-24493 CVE-2026-31949

LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos

MEDIUM 62

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.004 Published 2026-03-13 Fixed in 0.8.3-rc1 CWE-248

TI-2026-24490 CVE-2026-31944

LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link

HIGH 66

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0026 Published 2026-03-13 No fix listed CWE-306

TI-2025-06467 CVE-2025-7105 · GHSA-crqj-2v3f-c8g9

Denial of Service via JavaScript Memory Overflow in danny-avila/librechat

MEDIUM 59

A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork` to fork numerous contents rapidly.

CVSS 3.0MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00301 Published 2026-02-02 Fixed in v0.7.9 CWE-400

TI-2026-17862 CVE-2026-22252

LibreChat MCP Stdio Remote Command Execution

HIGH 76

LibreChat is a ChatGPT clone with additional features.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.04223 Published 2026-01-12 Fixed in v0.8.2-rc2 CWE-285

Vulnerabilities

Filters