Advisories · Technology

danny-avila LibreChat.

Every CVE that names danny-avila LibreChat among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-54024 CVE record

CVSS 6.5 Medium

LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits
- danny-avila LibreChat
- Denial of service
Not analysed yet 25 Jun 2026
CVE-2026-54025 CVE record

CVSS 5.4 Medium

LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview
- danny-avila LibreChat
- Cross-site scripting (XSS)
Not analysed yet 25 Jun 2026
CVE-2026-54027 CVE record

CVSS 6.5 Medium

LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization
- danny-avila LibreChat
- Broken access control
Not analysed yet 25 Jun 2026
CVE-2026-54029 CVE record

CVSS 5.3 Medium

LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter
- danny-avila LibreChat
- Broken access control
Not analysed yet 25 Jun 2026
CVE-2026-54033 CVE record

CVSS 7.7 High

LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs
- danny-avila LibreChat
- Server-side request forgery (SSRF)
Not analysed yet 25 Jun 2026
CVE-2026-54037 CVE record

CVSS 6.5 Medium

LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork
- danny-avila LibreChat
- Denial of service
Not analysed yet 25 Jun 2026
CVE-2026-54030 CVE record

CVSS 8.0 High

LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow
- danny-avila LibreChat
- CWE-346
Not analysed yet 25 Jun 2026
CVE-2026-54040 CVE record

CVSS 5.9 Medium

LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass
- danny-avila LibreChat
- Authentication bypass
Not analysed yet 25 Jun 2026
CVE-2026-54036 CVE record

CVSS 5.3 Medium

LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification
- danny-avila LibreChat
- Authentication bypass
Not analysed yet 25 Jun 2026
CVE-2026-44654 CVE record

CVSS 5.7 Medium

LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents
- danny-avila LibreChat
- Broken access control
Not analysed yet 2 Jun 2026
CVE-2026-44653 CVE record

CVSS 6.5 Medium

LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets
- danny-avila LibreChat
- Information disclosure
Not analysed yet 2 Jun 2026
CVE-2026-32625 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

LibreChat Exfiltrates Server Secrets via MCP Server URL Injection
- danny-avila LibreChat
- Information disclosure
Not analysed yet 2 Jun 2026
CVE-2026-31942 CVE record

CVSS 7.1 High

LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys
- danny-avila LibreChat
- Broken access control
Not analysed yet 2 Jun 2026
CVE-2026-34371 CVE record

CVSS 6.3 Medium

LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal
- danny-avila LibreChat
- Path traversal
Not analysed yet 7 Apr 2026
CVE-2026-31951 CVE record

CVSS 6.8 Medium

LibreChat's MCP Server Header Injection Enables OAuth Token Theft
- danny-avila LibreChat
- Information disclosure
Not analysed yet 27 Mar 2026
CVE-2026-31950 CVE record

CVSS 5.3 Medium

LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats
- danny-avila LibreChat
- Broken access control
Not analysed yet 27 Mar 2026
CVE-2026-31945 CVE record

CVSS 7.7 High

LibreChat Server-Side Request Forgery using DNS resolution
- danny-avila LibreChat
- Server-side request forgery (SSRF)
Not analysed yet 27 Mar 2026
CVE-2026-31943 CVE record

CVSS 8.5 High

LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP
- danny-avila LibreChat
- Server-side request forgery (SSRF)
Not analysed yet 27 Mar 2026
CVE-2025-41258 CVE record

CVSS 8.0 High

LibreChat RAG API Authentication Bypass
- danny-avila LibreChat
- Broken access control
Not analysed yet 18 Mar 2026
CVE-2026-31949 CVE record

CVSS 6.5 Medium

LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos
- danny-avila LibreChat
- CWE-248
Not analysed yet 13 Mar 2026
CVE-2026-31944 CVE record

CVSS 7.6 High

LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link
- danny-avila LibreChat
- Authentication bypass
Not analysed yet 13 Mar 2026
CVE-2025-7105 CVE record

CVSS 5.7 Medium

Denial of Service via JavaScript Memory Overflow in danny-avila/librechat
- danny-avila/librechat
- Denial of service
Not analysed yet 2 Feb 2026
CVE-2026-22252 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

LibreChat MCP Stdio Remote Command Execution
- danny-avila LibreChat
- Broken access control
Not analysed yet 12 Jan 2026
CVE-2025-69222 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions
- danny-avila LibreChat
- Server-side request forgery (SSRF)
Not analysed yet 7 Jan 2026
CVE-2025-69221 CVE record

CVSS 4.3 Medium

LibreChat has Insufficient Access Control for Agent Permission Queries
- danny-avila LibreChat
- Broken access control
Not analysed yet 7 Jan 2026
CVE-2025-69220 CVE record

CVSS 7.1 High

LibreChat has Insufficient Access Control for Agent Files
- danny-avila LibreChat
- Broken access control
Not analysed yet 7 Jan 2026
CVE-2025-66452 CVE record

CVSS 5.3 Medium

LibreChat's lack of JSON parsing error handling can lead to XSS
- danny-avila LibreChat
- Cross-site scripting (XSS)
Not analysed yet 11 Dec 2025
CVE-2025-66451 CVE record

CVSS 5.3 Medium

LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes
- danny-avila LibreChat
- Broken access control
- CWE-20
Not analysed yet 11 Dec 2025
CVE-2025-66450 CVE record

CVSS 8.6 High

LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload
- danny-avila LibreChat
- Cross-site scripting (XSS)
Not analysed yet 11 Dec 2025
CVE-2025-66201 CVE record

CVSS 8.6 High

LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability
- danny-avila LibreChat
- Server-side request forgery (SSRF)
- CWE-20
Not analysed yet 29 Nov 2025
CVE-2025-8849 CVE record

CVSS 5.4 Medium

Denial of Service in danny-avila/librechat
- danny-avila/librechat
- Denial of service
Not analysed yet 30 Oct 2025
CVE-2025-8850 CVE record

CVSS 3.1 Low

Insecure API Design in danny-avila/librechat
- danny-avila/librechat
- CWE-440
Not analysed yet 30 Oct 2025
CVE-2025-8848 CVE record

CVSS 4.8 Medium

HTML Injection in Accept-Language Header in danny-avila/librechat
- danny-avila/librechat
- Code injection
Not analysed yet 22 Oct 2025
CVE-2025-7104 CVE record

CVSS 4.3 Medium

Mass Assignment in danny-avila/librechat
- danny-avila/librechat
- Broken access control
Not analysed yet 29 Sept 2025
CVE-2025-7106 CVE record

CVSS 5.3 Medium

Authorization Bypass due to Incorrect Access Control in danny-avila/librechat
- danny-avila/librechat
- Broken access control
Not analysed yet 23 Sept 2025
CVE-2025-6088 CVE record

CVSS 4.2 Medium

Improper Authorization in danny-avila/librechat
- danny-avila/librechat
- Broken access control
Not analysed yet 11 Sept 2025
CVE-2025-54868 CVE record

CVSS 7.5 High

LibreChat exposes arbitrary chats through Meilisearch engine
- danny-avila LibreChat
- Broken access control
Not analysed yet 5 Aug 2025
CVE-2024-10359 CVE record

CVSS 4.6 Medium

Mass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat
- danny-avila/librechat
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-11173 CVE record

CVSS 6.5 Medium

Unhandled Exception in danny-avila/librechat
- danny-avila/librechat
- CWE-248
Not analysed yet 20 Mar 2025
CVE-2024-10363 CVE record

CVSS 5.4 Medium

Improper Access Control in danny-avila/LibreChat
- danny-avila/librechat
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-11171 CVE record

CVSS 7.5 High

Improper Input Validation in danny-avila/librechat
- danny-avila/librechat
- Denial of service
Not analysed yet 20 Mar 2025
CVE-2024-11172 CVE record

CVSS 7.5 High

Denial of Service in danny-avila/librechat
- danny-avila/librechat
- CWE-248
Not analysed yet 20 Mar 2025
CVE-2024-11169 CVE record

CVSS 7.5 High

Unhandled Exception Leading to Server Crash in danny-avila/librechat
- danny-avila/librechat
- CWE-115
Not analysed yet 20 Mar 2025
CVE-2024-11167 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Improper Access Control in danny-avila/librechat
- danny-avila/librechat
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-10366 CVE record

CVSS 7.6 High

IDOR in delete attachments in danny-avila/librechat
- danny-avila/librechat
- Broken access control
Not analysed yet 20 Mar 2025
CVE-2024-12580 CVE record

CVSS 4.3 Medium

Logs Debug Injection in danny-avila/librechat
- danny-avila/librechat
- Other injection
Not analysed yet 20 Mar 2025
CVE-2024-10361 CVE record

CVSS 8.1 High

Arbitrary File Deletion via Path Traversal in danny-avila/librechat
- danny-avila/librechat
- Path traversal
Not analysed yet 20 Mar 2025
CVE-2024-11170 CVE record

CVSS 8.8 High

Path Traversal in danny-avila/librechat
- danny-avila/librechat
- CWE-29
Not analysed yet 20 Mar 2025