What’s Vulnerable › Products
danny-avila LibreChat vulnerabilities
53 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 51 published in the last 12 months.
Check whether your danny-avila LibreChat version is affected
Latest danny-avila LibreChat vulnerabilities
- CVE-2026-54040 — LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass (CVSS 7.1)
- CVE-2026-54037 — LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork (CVSS 6.5)
- CVE-2026-54033 — LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs (CVSS 6.5)
- CVE-2026-54030 — LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow (CVSS 9.3)
- CVE-2026-54029 — LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter (CVSS 6.5)
- CVE-2026-54027 — LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization (CVSS 6.5)
- CVE-2026-54025 — LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview (CVSS 5.4)
- CVE-2026-54024 — LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits (CVSS 6.5)
- CVE-2026-54036 — LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification (CVSS 8.1)
- CVE-2026-44654 — LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents (CVSS 8.1)
- CVE-2026-44653 — LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets (CVSS 6.5)
- CVE-2026-32625 — LibreChat Exfiltrates Server Secrets via MCP Server URL Injection (CVSS 9.6)
- CVE-2026-31942 — LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys (CVSS 7.1)
- CVE-2026-34371 — LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal (CVSS 6.3)
- CVE-2026-31951 — LibreChat's MCP Server Header Injection Enables OAuth Token Theft (CVSS 5.7)
- CVE-2026-31950 — LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats (CVSS 5.3)
- CVE-2026-31945 — LibreChat Server-Side Request Forgery using DNS resolution (CVSS 7.7)
- CVE-2026-31943 — LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP (CVSS 8.5)
- CVE-2026-33265 — (CVSS 9.0)
- CVE-2025-41258 — LibreChat RAG API Authentication Bypass (CVSS 8.0)
- CVE-2026-4276 — LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries. (CVSS 7.5)
- CVE-2026-31949 — LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos (CVSS 6.5)
- CVE-2026-31944 — LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link (CVSS 7.6)
- CVE-2025-7105 — Denial of Service via JavaScript Memory Overflow in danny-avila/librechat (CVSS 5.7)
- CVE-2026-22252 — LibreChat MCP Stdio Remote Command Execution (CVSS 9.9)