Browse CVEs

HIGH 7.1 CVE-2026-54040 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/auth/2fa/backup/regenerate endpoint reg… Librechat after 0.8.3 Fix from $1,9502026-06-25 MEDIUM 6.5 CVE-2026-54037 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and for… Librechat after 0.8.3 Fix from $1,6002026-06-25 CRITICAL 9.3 CVE-2026-54030 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate th… Librechat after 0.8.4 Fix from $2,3002026-06-25 MEDIUM 6.5 CVE-2026-54024 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2024-11171 (commit bb58a2d0) added li… Librechat after 0.8.3 Fix from $1,6002026-06-25 MEDIUM 6.5 CVE-2026-54027 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the POST /api/files/images endpoint allows any authen… Librechat after 0.8.3 Fix from $1,6002026-06-25 MEDIUM 6.5 CVE-2026-54029 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the DELETE /api/messages/:conversationId/:messageId e… Librechat after 0.8.3 Fix from $1,6002026-06-25 MEDIUM 6.5 CVE-2026-54033 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, LibreChat allows users to configure custom OpenAI-com… Librechat after 0.8.3 Fix from $1,6002026-06-25 MEDIUM 5.4 CVE-2026-54025 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, there is a vulnerability in LibreChat's markdown arti… Librechat after 0.7.8 Fix from $1,6002026-06-25 HIGH 8.1 CVE-2026-54036 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the GET /api/auth/2fa/enable endpoint can be called b… Librechat after 0.8.3 Fix from $1,9502026-06-25 HIGH 8.1 CVE-2026-44654 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete f… Librechat 0.8.5+ Fix from $1,9502026-06-02 MEDIUM 6.5 CVE-2026-44653 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to a… Librechat 0.8.4+ Fix from $1,6002026-06-02 CRITICAL 9.6 CVE-2026-32625 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) s… Librechat 0.8.4+ Fix from $2,3002026-06-02 HIGH 7.1 CVE-2026-31942 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.7.6, an Insecure Direct Object Referenc… Librechat 0.8.3+ Fix from $1,9502026-06-02 MEDIUM 6.3 CVE-2026-34371 LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the execute_code sandbox when pers… Librechat 0.8.4+ Fix from $1,6002026-04-07 HIGH 7.7 CVE-2026-31945 LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack… Librechat No fix yet Fix from $1,9502026-03-27 MEDIUM 5.7 CVE-2026-31951 LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP (Model Context Protocol) servers can… Librechat 0.8.3+ Fix from $1,6002026-03-27 MEDIUM 5.3 CVE-2026-31950 LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming endpoint `/api/agents/chat/stream/:… Librechat No fix yet Fix from $1,6002026-03-27 HIGH 8.5 CVE-2026-31943 LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in `packages/api/src/auth/domain.ts` fails to detect I… Librechat 0.8.3+ Fix from $1,9502026-03-27 CRITICAL 9.0 CVE-2026-33265 In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API. Librechat No fix yet Fix from $2,3002026-03-18 HIGH 8.0 CVE-2025-41258 LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of… Librechat No fix yet Fix from $1,9502026-03-18 HIGH 7.5 CVE-2026-4276 LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries. Librechat Mitigation only Fix from $1,9502026-03-16 HIGH 7.6 CVE-2026-31944 LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth callback endpoint accepts the … Librechat No fix yet Fix from $1,9502026-03-13 MEDIUM 6.5 CVE-2026-31949 LibreChat is a ChatGPT clone with additional features. Prior to 0.8.3-rc1, a Denial of Service (DoS) vulnerability exists in the DELETE /api/convos e… Librechat 0.8.3+ Fix from $1,6002026-03-13 CRITICAL 9.9 CVE-2026-22252 LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without valida… Librechat Patch available Fix from $2,3002026-01-12 HIGH 8.1 CVE-2025-69222 LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missin… Librechat Patch available Fix from $1,9502026-01-07 MEDIUM 5.9 CVE-2025-69220 LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file co… Librechat Patch available Fix from $1,6002026-01-07 MEDIUM 6.5 CVE-2025-66451 LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modif… Librechat 0.8.1+ Fix from $1,6002025-12-11 MEDIUM 6.1 CVE-2025-66452 LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from exp… Librechat after 0.8.0 Fix from $1,6002025-12-11 MEDIUM 5.4 CVE-2025-66450 LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST r… Librechat 0.8.1+ Fix from $1,6002025-12-11 HIGH 8.1 CVE-2025-66201 LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by … Librechat 0.8.1+ Fix from $1,9502025-11-29