# danny-avila LibreChat.

Every CVE that names danny-avila LibreChat among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits](https://agentprime.io/advisories/CVE-2026-54024.md)
  `CVE-2026-54024` · CVE record: danny-avila LibreChat · CVSS 6.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview](https://agentprime.io/advisories/CVE-2026-54025.md)
  `CVE-2026-54025` · CVE record: danny-avila LibreChat · CVSS 5.4 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Cross-site scripting (XSS)
- [LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization](https://agentprime.io/advisories/CVE-2026-54027.md)
  `CVE-2026-54027` · CVE record: danny-avila LibreChat · CVSS 6.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Broken access control
- [LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter](https://agentprime.io/advisories/CVE-2026-54029.md)
  `CVE-2026-54029` · CVE record: danny-avila LibreChat · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Broken access control
- [LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs](https://agentprime.io/advisories/CVE-2026-54033.md)
  `CVE-2026-54033` · CVE record: danny-avila LibreChat · CVSS 7.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork](https://agentprime.io/advisories/CVE-2026-54037.md)
  `CVE-2026-54037` · CVE record: danny-avila LibreChat · CVSS 6.5 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Denial of service
- [LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow](https://agentprime.io/advisories/CVE-2026-54030.md)
  `CVE-2026-54030` · CVE record: danny-avila LibreChat · CVSS 8.0 High · Not analysed yet · Published 25 Jun 2026 · Tags: CWE-346
- [LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass](https://agentprime.io/advisories/CVE-2026-54040.md)
  `CVE-2026-54040` · CVE record: danny-avila LibreChat · CVSS 5.9 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Authentication bypass
- [LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification](https://agentprime.io/advisories/CVE-2026-54036.md)
  `CVE-2026-54036` · CVE record: danny-avila LibreChat · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Authentication bypass
- [LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents](https://agentprime.io/advisories/CVE-2026-44654.md)
  `CVE-2026-44654` · CVE record: danny-avila LibreChat · CVSS 5.7 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Broken access control
- [LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets](https://agentprime.io/advisories/CVE-2026-44653.md)
  `CVE-2026-44653` · CVE record: danny-avila LibreChat · CVSS 6.5 Medium · Not analysed yet · Published 2 Jun 2026 · Tags: Information disclosure
- [LibreChat Exfiltrates Server Secrets via MCP Server URL Injection](https://agentprime.io/advisories/CVE-2026-32625.md)
  `CVE-2026-32625` · CVE record: danny-avila LibreChat · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jun 2026 · Tags: Information disclosure
- [LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys](https://agentprime.io/advisories/CVE-2026-31942.md)
  `CVE-2026-31942` · CVE record: danny-avila LibreChat · CVSS 7.1 High · Not analysed yet · Published 2 Jun 2026 · Tags: Broken access control
- [LibreChat Affected by Arbitrary File Write via \`execute_code\` Artifact Filename Traversal](https://agentprime.io/advisories/CVE-2026-34371.md)
  `CVE-2026-34371` · CVE record: danny-avila LibreChat · CVSS 6.3 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Path traversal
- [LibreChat's MCP Server Header Injection Enables OAuth Token Theft](https://agentprime.io/advisories/CVE-2026-31951.md)
  `CVE-2026-31951` · CVE record: danny-avila LibreChat · CVSS 6.8 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Information disclosure
- [LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats](https://agentprime.io/advisories/CVE-2026-31950.md)
  `CVE-2026-31950` · CVE record: danny-avila LibreChat · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Broken access control
- [LibreChat Server-Side Request Forgery using DNS resolution](https://agentprime.io/advisories/CVE-2026-31945.md)
  `CVE-2026-31945` · CVE record: danny-avila LibreChat · CVSS 7.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP](https://agentprime.io/advisories/CVE-2026-31943.md)
  `CVE-2026-31943` · CVE record: danny-avila LibreChat · CVSS 8.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat RAG API Authentication Bypass](https://agentprime.io/advisories/CVE-2025-41258.md)
  `CVE-2025-41258` · CVE record: danny-avila LibreChat · CVSS 8.0 High · Not analysed yet · Published 18 Mar 2026 · Tags: Broken access control
- [LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos](https://agentprime.io/advisories/CVE-2026-31949.md)
  `CVE-2026-31949` · CVE record: danny-avila LibreChat · CVSS 6.5 Medium · Not analysed yet · Published 13 Mar 2026 · Tags: CWE-248
- [LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link](https://agentprime.io/advisories/CVE-2026-31944.md)
  `CVE-2026-31944` · CVE record: danny-avila LibreChat · CVSS 7.6 High · Not analysed yet · Published 13 Mar 2026 · Tags: Authentication bypass
- [Denial of Service via JavaScript Memory Overflow in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-7105.md)
  `CVE-2025-7105` · CVE record: danny-avila danny-avila/librechat · CVSS 5.7 Medium · Not analysed yet · Published 2 Feb 2026 · Tags: Denial of service
- [LibreChat MCP Stdio Remote Command Execution](https://agentprime.io/advisories/CVE-2026-22252.md)
  `CVE-2026-22252` · CVE record: danny-avila LibreChat · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Jan 2026 · Tags: Broken access control
- [LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions](https://agentprime.io/advisories/CVE-2025-69222.md)
  `CVE-2025-69222` · CVE record: danny-avila LibreChat · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jan 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat has Insufficient Access Control for Agent Permission Queries](https://agentprime.io/advisories/CVE-2025-69221.md)
  `CVE-2025-69221` · CVE record: danny-avila LibreChat · CVSS 4.3 Medium · Not analysed yet · Published 7 Jan 2026 · Tags: Broken access control
- [LibreChat has Insufficient Access Control for Agent Files](https://agentprime.io/advisories/CVE-2025-69220.md)
  `CVE-2025-69220` · CVE record: danny-avila LibreChat · CVSS 7.1 High · Not analysed yet · Published 7 Jan 2026 · Tags: Broken access control
- [LibreChat's lack of JSON parsing error handling can lead to XSS](https://agentprime.io/advisories/CVE-2025-66452.md)
  `CVE-2025-66452` · CVE record: danny-avila LibreChat · CVSS 5.3 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Cross-site scripting (XSS)
- [LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes](https://agentprime.io/advisories/CVE-2025-66451.md)
  `CVE-2025-66451` · CVE record: danny-avila LibreChat · CVSS 5.3 Medium · Not analysed yet · Published 11 Dec 2025 · Tags: Broken access control, CWE-20
- [LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload](https://agentprime.io/advisories/CVE-2025-66450.md)
  `CVE-2025-66450` · CVE record: danny-avila LibreChat · CVSS 8.6 High · Not analysed yet · Published 11 Dec 2025 · Tags: Cross-site scripting (XSS)
- [LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability](https://agentprime.io/advisories/CVE-2025-66201.md)
  `CVE-2025-66201` · CVE record: danny-avila LibreChat · CVSS 8.6 High · Not analysed yet · Published 29 Nov 2025 · Tags: Server-side request forgery (SSRF), CWE-20
- [Denial of Service in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-8849.md)
  `CVE-2025-8849` · CVE record: danny-avila danny-avila/librechat · CVSS 5.4 Medium · Not analysed yet · Published 30 Oct 2025 · Tags: Denial of service
- [Insecure API Design in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-8850.md)
  `CVE-2025-8850` · CVE record: danny-avila danny-avila/librechat · CVSS 3.1 Low · Not analysed yet · Published 30 Oct 2025 · Tags: CWE-440
- [HTML Injection in Accept-Language Header in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-8848.md)
  `CVE-2025-8848` · CVE record: danny-avila danny-avila/librechat · CVSS 4.8 Medium · Not analysed yet · Published 22 Oct 2025 · Tags: Code injection
- [Mass Assignment in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-7104.md)
  `CVE-2025-7104` · CVE record: danny-avila danny-avila/librechat · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2025 · Tags: Broken access control
- [Authorization Bypass due to Incorrect Access Control in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-7106.md)
  `CVE-2025-7106` · CVE record: danny-avila danny-avila/librechat · CVSS 5.3 Medium · Not analysed yet · Published 23 Sept 2025 · Tags: Broken access control
- [Improper Authorization in danny-avila/librechat](https://agentprime.io/advisories/CVE-2025-6088.md)
  `CVE-2025-6088` · CVE record: danny-avila danny-avila/librechat · CVSS 4.2 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Broken access control
- [LibreChat exposes arbitrary chats through Meilisearch engine](https://agentprime.io/advisories/CVE-2025-54868.md)
  `CVE-2025-54868` · CVE record: danny-avila LibreChat · CVSS 7.5 High · Not analysed yet · Published 5 Aug 2025 · Tags: Broken access control
- [Mass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-10359.md)
  `CVE-2024-10359` · CVE record: danny-avila danny-avila/librechat · CVSS 4.6 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Broken access control
- [Unhandled Exception in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11173.md)
  `CVE-2024-11173` · CVE record: danny-avila danny-avila/librechat · CVSS 6.5 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-248
- [Improper Access Control in danny-avila/LibreChat](https://agentprime.io/advisories/CVE-2024-10363.md)
  `CVE-2024-10363` · CVE record: danny-avila danny-avila/librechat · CVSS 5.4 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Broken access control
- [Improper Input Validation in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11171.md)
  `CVE-2024-11171` · CVE record: danny-avila danny-avila/librechat · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: Denial of service
- [Denial of Service in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11172.md)
  `CVE-2024-11172` · CVE record: danny-avila danny-avila/librechat · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-248
- [Unhandled Exception Leading to Server Crash in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11169.md)
  `CVE-2024-11169` · CVE record: danny-avila danny-avila/librechat · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-115
- [Improper Access Control in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11167.md)
  `CVE-2024-11167` · CVE record: danny-avila danny-avila/librechat · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Mar 2025 · Tags: Broken access control
- [IDOR in delete attachments in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-10366.md)
  `CVE-2024-10366` · CVE record: danny-avila danny-avila/librechat · CVSS 7.6 High · Not analysed yet · Published 20 Mar 2025 · Tags: Broken access control
- [Logs Debug Injection in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-12580.md)
  `CVE-2024-12580` · CVE record: danny-avila danny-avila/librechat · CVSS 4.3 Medium · Not analysed yet · Published 20 Mar 2025 · Tags: Other injection
- [Arbitrary File Deletion via Path Traversal in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-10361.md)
  `CVE-2024-10361` · CVE record: danny-avila danny-avila/librechat · CVSS 8.1 High · Not analysed yet · Published 20 Mar 2025 · Tags: Path traversal
- [Path Traversal in danny-avila/librechat](https://agentprime.io/advisories/CVE-2024-11170.md)
  `CVE-2024-11170` · CVE record: danny-avila danny-avila/librechat · CVSS 8.8 High · Not analysed yet · Published 20 Mar 2025 · Tags: CWE-29

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=danny-avila-librechat>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/danny-avila-librechat/>. Everything for agents: <https://agentprime.io/llms.txt>.