Technology · LibreChat
LibreChat vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 25 vulnerabilities in LibreChat: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-54040, was published on 25 June 2026.
- Last 7 days
- 0
- Last 90 days
- 0
- Critical, all time
- 1
- Exploited in the wild
- 0
About LibreChat
LibreChat is an open-source, self-hosted AI chat interface that supports multiple AI providers and models.
Latest LibreChat vulnerabilities
- CVE-2026-54040: LibreChat 2FA bypass via unauthenticated backup code regenerationmediumCVSS 5.9
- CVE-2026-54037: LibreChat resource exhaustion via missing rate limiting in duplicate endpointmediumCVSS 6.5
- CVE-2026-54033: LibreChat SSRF via custom endpoint baseURLhighCVSS 7.7
- CVE-2026-54030: LibreChat token theft via missing OAuth resource validation in MCPhighCVSS 8
- CVE-2026-54029: danny-avila LibreChat IDOR in message deletion endpointmediumCVSS 5.3
- CVE-2026-54027: LibreChat missing authorization in image upload endpointmediumCVSS 6.5
- CVE-2026-54025: LibreChat stored XSS in markdown artifact previewmediumCVSS 5.4
- CVE-2026-54024: LibreChat resource exhaustion in conversation import endpointmediumCVSS 6.5
- CVE-2026-54036: danny-avila LibreChat 2FA takeover via re-enrollment endpointmediumCVSS 5.3
- CVE-2026-44654: LibreChat incorrect authorization in file deletion endpointinfoCVSS 5.7
- CVE-2026-44653: LibreChat sensitive information disclosure in MCP server APImediumCVSS 6.5
- CVE-2026-32625: LibreChat environment variable exfiltration in MCP server integrationcriticalCVSS 9.6
- CVE-2026-31942: LibreChat IDOR in API keys management endpointhighCVSS 7.1
- CVE-2026-34371: LibreChat path traversal in execute_code artifact persistencemediumCVSS 6.3EPSS 0.3%
- CVE-2026-31951: LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP…mediumCVSS 6.8EPSS 0.3%
- CVE-2026-31950: LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming…mediumCVSS 5.3EPSS 0.2%
- CVE-2026-31945: LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a…highCVSS 7.7EPSS 0.3%
- CVE-2026-31943: LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in…highCVSS 8.5EPSS 0.2%
- CVE-2026-4276: LibreChat RAG API log injection in file_id parameterhighCVSS 7.5EPSS 0.1%
- CVE-2025-66452: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON…mediumCVSS 6.1EPSS 0.2%
- CVE-2025-66451: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON…mediumCVSS 6.5EPSS 0.3%
- CVE-2025-66450: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the…mediumCVSS 5.4EPSS 0.2%
- CVE-2025-8849: LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the…highCVSS 7.5EPSS 0.4%
- CVE-2025-8850: In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA)…highCVSS 8.8EPSS 0.4%
- CVE-2025-8848: A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When…mediumCVSS 5.4EPSS 0.4%
Most severe LibreChat vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-32625: LibreChat environment variable exfiltration in MCP server integrationcriticalCVSS 9.6
- CVE-2025-8850: In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA)…highCVSS 8.8EPSS 0.4%
- CVE-2026-31943: LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in…highCVSS 8.5EPSS 0.2%
- CVE-2026-54030: LibreChat token theft via missing OAuth resource validation in MCPhighCVSS 8
- CVE-2026-31945: LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a…highCVSS 7.7EPSS 0.3%
- CVE-2026-54033: LibreChat SSRF via custom endpoint baseURLhighCVSS 7.7
- CVE-2025-8849: LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the…highCVSS 7.5EPSS 0.4%
- CVE-2026-4276: LibreChat RAG API log injection in file_id parameterhighCVSS 7.5EPSS 0.1%
- CVE-2026-31942: LibreChat IDOR in API keys management endpointhighCVSS 7.1
- CVE-2026-31951: LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP…mediumCVSS 6.8EPSS 0.3%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 0 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many LibreChat vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/librechat)<a href="https://junglewise.ai/threats/technologies/librechat"><img src="https://junglewise.ai/threats/technologies/librechat/badge.svg" alt="LibreChat vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/librechat.json, and this page as text at https://junglewise.ai/threats/technologies/librechat.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "LibreChat vulnerabilities", https://junglewise.ai/threats/technologies/librechat, 9 November 2026.