What’s Vulnerable › Vulnerabilities

CVE-2026-22252: LibreChat MCP Stdio Remote Command Execution

• Severity: critical (CVSS 9.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-01-12 · updated 2026-06-17
• Weakness: CWE-285

Description

LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.

Affected products

• danny-avila LibreChat: 0.8.2-rc1

References

• https://github.com/danny-avila/LibreChat/commit/211b39f3113d4e6ecab84be0a83f4e9c9dea127f
• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-cxhj-j78r-p88f

Get alerted when CVE-2026-22252 or the next vulnerability affects your stack