# CVE-2026-54027: LibreChat missing authorization in image upload endpoint

Source: https://junglewise.ai/threats/cve-2026-54027-librechat-missing-authorization-in-image-upload-endpoint  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-25. Updated: 2026-06-25  
License: CC BY 4.0 with a link back

CVE-2026-54027 · Severity: medium · CVSS 6.5 · Published 2026-06-25

LibreChat is an open-source platform that allows users to interact with various AI models through a unified interface. A security flaw allows any logged-in user to upload files to AI "agents" owned by other users without permission. This could allow an attacker to tamper with the behavior of another person's AI assistant or clutter their workspace with unauthorized data.

Technologies: [LibreChat](https://junglewise.ai/threats/technologies/librechat). Vendors: [LibreChat](https://junglewise.ai/threats/vendors/librechat).

## Quick answers

**Is CVE-2026-54027 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-54027 being exploited in the wild.

**How severe is CVE-2026-54027?** Medium severity, with a CVSS score of 6.5, published 25 June 2026.

**Which products and versions are affected?** LibreChat < 0.8.4-rc1.

**Is there a fix for CVE-2026-54027?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-54027 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-54027?** Check whether you run LibreChat at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A missing authorization check in the 'POST /api/files/images' endpoint allows authenticated users to upload files to any agent's 'tool_resources' (such as context or execute_code) regardless of ownership. While a previous security patch implemented permission checks for the general '/api/files' route, the image-specific route was overlooked and continues to call 'processAgentFileUpload' without verifying if the requester has EDIT permissions for the target 'agent_id'. An attacker can exploit this to inject arbitrary files into a victim's agent configuration, leading to resource pollution or manipulation of the agent's operational context. The vulnerability is addressed in version 0.8.4-rc1.

## Affected products

- danny-avila LibreChat < 0.8.4-rc1

## Timeline

- 2026-06-02: advisory: GitHub Security Advisory published
- 2026-06-25: disclosed: NVD publication date

## References

- [https://github.com/danny-avila/LibreChat/security/advisories/GHSA-c55r-p24w-hcj5](https://github.com/danny-avila/LibreChat/security/advisories/GHSA-c55r-p24w-hcj5)

## Related threats

- [LibreChat 2FA bypass via unauthenticated backup code regeneration](https://junglewise.ai/threats/cve-2026-54040-librechat-2fa-bypass-via-unauthenticated-backup-code-regeneration)
- [LibreChat resource exhaustion via missing rate limiting in duplicate endpoint](https://junglewise.ai/threats/cve-2026-54037-librechat-resource-exhaustion-via-missing-rate-limiting-in)
- [LibreChat SSRF via custom endpoint baseURL](https://junglewise.ai/threats/cve-2026-54033-librechat-ssrf-via-custom-endpoint-baseurl)
- [LibreChat token theft via missing OAuth resource validation in MCP](https://junglewise.ai/threats/cve-2026-54030-librechat-token-theft-via-missing-oauth-resource-validation-in)
- [danny-avila LibreChat IDOR in message deletion endpoint](https://junglewise.ai/threats/cve-2026-54029-danny-avila-librechat-idor-in-message-deletion-endpoint)