What’s Vulnerable › Vulnerabilities

CVE-2025-7104: Mass Assignment in danny-avila/librechat

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-09-29 · updated 2026-10-09
• Weakness: CWE-915

Description

A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra fields in the request body are included in agentData and passed to the database layer, allowing overwriting of any field in the schema, such as author, access_level, isCollaborative, and projectIds. Additionally, the Object.Prototype can be polluted due to the use of Object.assign with spread operators.

Affected products

• danny-avila LibreChat: before 0.7.9 — fixed in 0.7.9

How to fix

Upgrade to a fixed version: danny-avila LibreChat 0.7.9. Check the vendor advisory for mitigations.

References

• https://github.com/danny-avila/librechat/commit/a37bf6719cfbc2de270f7d87b6b85d87cc1768db
• https://huntr.com/bounties/32a175c4-7543-4503-a3d0-7880abd1826b

Get alerted when CVE-2025-7104 or the next vulnerability affects your stack