Skip to contentDanny-avila Librechat vulnerabilities
- danny-avila librechatLibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size LimitsCVE-2026-540246.5 Medium
- danny-avila librechatLibreChat: Stored XSS via unescaped image alt text in markdown artifact previewCVE-2026-540255.4 Medium
- danny-avila librechatLibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload AuthorizationCVE-2026-540276.5 Medium
- danny-avila librechatLibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User FilterCVE-2026-540295.3 Medium
- danny-avila librechatLibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLsCVE-2026-540337.7 High
- danny-avila librechatLibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/forkCVE-2026-540376.5 Medium
- danny-avila librechatLibreChat: Missing Resource Parameter Validation in MCP OAuth FlowCVE-2026-540308.0 High
- danny-avila librechatLibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA BypassCVE-2026-540405.9 Medium
- danny-avila librechatLibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP VerificationCVE-2026-540365.3 Medium
- danny-avila librechatLibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agentsCVE-2026-446545.7 Medium
- danny-avila librechatLibreChat Shared MCP Server View Leaks Decrypted Admin SecretsCVE-2026-446536.5 Medium
- danny-avila librechatLibreChat Exfiltrates Server Secrets via MCP Server URL InjectionCVE-2026-326259.6 Critical
- danny-avila librechatLibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keysCVE-2026-319427.1 High
- danny-avila librechatLibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename TraversalCVE-2026-343716.3 Medium
- danny-avila librechatLibreChat's MCP Server Header Injection Enables OAuth Token TheftCVE-2026-319516.8 Medium
- danny-avila librechatLibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' ChatsCVE-2026-319505.3 Medium
- danny-avila librechatLibreChat Server-Side Request Forgery using DNS resolutionCVE-2026-319457.7 High
- danny-avila librechatLibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIPCVE-2026-319438.5 High
- danny-avila librechatIn LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.CVE-2026-332656.3 Medium
- danny-avila librechatLibreChat RAG API Authentication BypassCVE-2025-412588.0 High
- danny-avila librechatLibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convosCVE-2026-319496.5 Medium
- danny-avila librechatLibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect linkCVE-2026-319447.6 High
- danny-avila danny-avila/librechatDenial of Service via JavaScript Memory Overflow in danny-avila/librechatCVE-2025-71055.7 Medium
- danny-avila librechatLibreChat MCP Stdio Remote Command ExecutionCVE-2026-222529.1 Critical
- danny-avila librechatLibreChat is vulnerable to Server-Side Request Forgery due to missing restrictionsCVE-2025-692229.1 Critical
- danny-avila librechatLibreChat has Insufficient Access Control for Agent Permission QueriesCVE-2025-692214.3 Medium
- danny-avila librechatLibreChat has Insufficient Access Control for Agent FilesCVE-2025-692207.1 High
- danny-avila librechatLibreChat's lack of JSON parsing error handling can lead to XSSCVE-2025-664525.3 Medium
- danny-avila librechatLibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission ChangesCVE-2025-664515.3 Medium
- danny-avila librechatLibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image UploadCVE-2025-664508.6 High
- danny-avila librechatLibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions CapabilityCVE-2025-662018.6 High
- danny-avila danny-avila/librechat, librechat +1 moreDenial of Service in danny-avila/librechatCVE-2025-88495.4 Medium
- danny-avila danny-avila/librechat, librechat +1 moreInsecure API Design in danny-avila/librechatCVE-2025-88503.1 Low
- danny-avila danny-avila/librechat, librechat +1 moreHTML Injection in Accept-Language Header in danny-avila/librechatCVE-2025-88484.8 Medium
- danny-avila danny-avila/librechat, librechat +1 moreMass Assignment in danny-avila/librechatCVE-2025-71044.3 Medium
- danny-avila danny-avila/librechat, librechat +1 moreAuthorization Bypass due to Incorrect Access Control in danny-avila/librechatCVE-2025-71065.3 Medium
- danny-avila danny-avila/librechat, librechat +1 moreImproper Authorization in danny-avila/librechatCVE-2025-60884.2 Medium
- danny-avila librechatLibreChat exposes arbitrary chats through Meilisearch engineCVE-2025-548687.5 High
- danny-avila danny-avila/librechat, librechat +1 moreMass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechatCVE-2024-103594.6 Medium
- danny-avila danny-avila/librechat, librechat +1 moreUnhandled Exception in danny-avila/librechatCVE-2024-111736.5 Medium
- danny-avila danny-avila/librechat, librechat +1 moreImproper Access Control in danny-avila/LibreChatCVE-2024-103635.4 Medium
- danny-avila danny-avila/librechat, librechat +1 moreImproper Input Validation in danny-avila/librechatCVE-2024-111717.5 High
- danny-avila danny-avila/librechat, librechat +1 moreDenial of Service in danny-avila/librechatCVE-2024-111727.5 High
- danny-avila danny-avila/librechat, librechat +1 moreUnhandled Exception Leading to Server Crash in danny-avila/librechatCVE-2024-111697.5 High
- danny-avila danny-avila/librechat, librechat +1 moreImproper Access Control in danny-avila/librechatCVE-2024-111679.4 Critical
- danny-avila danny-avila/librechat, librechat +1 moreIDOR in delete attachments in danny-avila/librechatCVE-2024-103667.6 High
- danny-avila danny-avila/librechat, librechat +1 moreLogs Debug Injection in danny-avila/librechatCVE-2024-125804.3 Medium
- danny-avila danny-avila/librechat, librechat +1 moreArbitrary File Deletion via Path Traversal in danny-avila/librechatCVE-2024-103618.1 High
- danny-avila danny-avila/librechat, librechat +1 morePath Traversal in danny-avila/librechatCVE-2024-111708.8 High