# LibreChat vulnerabilities

Source: https://junglewise.ai/threats/vendors/librechat  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour.  
Data: https://junglewise.ai/threats/vendors/librechat.json  
License: CC BY 4.0 with a link back

Junglewise Threat Intelligence has tracked 25 vulnerabilities in LibreChat: 0 in the last 7 days and 0 in the last 90 days, 1 of them critical and 0 exploited in the wild. The most recent, CVE-2026-54040, was published on 25 June 2026. 1 technology has a page of its own.

## Counts

- Last 7 days: 0
- Last 30 days: 0
- Last 90 days: 0
- All time: 25 (1 critical, 0 exploited in the wild)

## About LibreChat

An open-source AI chat interface that supports multiple large language model providers and self-hosting.

## Latest LibreChat vulnerabilities

- [CVE-2026-54040: LibreChat 2FA bypass via unauthenticated backup code regeneration](https://junglewise.ai/threats/cve-2026-54040-librechat-2fa-bypass-via-unauthenticated-backup-code-regeneration) (medium, CVSS 5.9, published 25 Jun 2026)
- [CVE-2026-54037: LibreChat resource exhaustion via missing rate limiting in duplicate endpoint](https://junglewise.ai/threats/cve-2026-54037-librechat-resource-exhaustion-via-missing-rate-limiting-in) (medium, CVSS 6.5, published 25 Jun 2026)
- [CVE-2026-54033: LibreChat SSRF via custom endpoint baseURL](https://junglewise.ai/threats/cve-2026-54033-librechat-ssrf-via-custom-endpoint-baseurl) (high, CVSS 7.7, published 25 Jun 2026)
- [CVE-2026-54030: LibreChat token theft via missing OAuth resource validation in MCP](https://junglewise.ai/threats/cve-2026-54030-librechat-token-theft-via-missing-oauth-resource-validation-in) (high, CVSS 8, published 25 Jun 2026)
- [CVE-2026-54029: danny-avila LibreChat IDOR in message deletion endpoint](https://junglewise.ai/threats/cve-2026-54029-danny-avila-librechat-idor-in-message-deletion-endpoint) (medium, CVSS 5.3, published 25 Jun 2026)
- [CVE-2026-54027: LibreChat missing authorization in image upload endpoint](https://junglewise.ai/threats/cve-2026-54027-librechat-missing-authorization-in-image-upload-endpoint) (medium, CVSS 6.5, published 25 Jun 2026)
- [CVE-2026-54025: LibreChat stored XSS in markdown artifact preview](https://junglewise.ai/threats/cve-2026-54025-librechat-stored-xss-in-markdown-artifact-preview) (medium, CVSS 5.4, published 25 Jun 2026)
- [CVE-2026-54024: LibreChat resource exhaustion in conversation import endpoint](https://junglewise.ai/threats/cve-2026-54024-librechat-resource-exhaustion-in-conversation-import-endpoint) (medium, CVSS 6.5, published 25 Jun 2026)
- [CVE-2026-54036: danny-avila LibreChat 2FA takeover via re-enrollment endpoint](https://junglewise.ai/threats/cve-2026-54036-danny-avila-librechat-2fa-takeover-via-re-enrollment-endpoint) (medium, CVSS 5.3, published 25 Jun 2026)
- [CVE-2026-44654: LibreChat incorrect authorization in file deletion endpoint](https://junglewise.ai/threats/cve-2026-44654-librechat-incorrect-authorization-in-file-deletion-endpoint) (info, CVSS 5.7, published 2 Jun 2026)
- [CVE-2026-44653: LibreChat sensitive information disclosure in MCP server API](https://junglewise.ai/threats/cve-2026-44653-librechat-sensitive-information-disclosure-in-mcp-server-api) (medium, CVSS 6.5, published 2 Jun 2026)
- [CVE-2026-32625: LibreChat environment variable exfiltration in MCP server integration](https://junglewise.ai/threats/cve-2026-32625-librechat-environment-variable-exfiltration-in-mcp-server) (critical, CVSS 9.6, published 2 Jun 2026)
- [CVE-2026-31942: LibreChat IDOR in API keys management endpoint](https://junglewise.ai/threats/cve-2026-31942-librechat-idor-in-api-keys-management-endpoint) (high, CVSS 7.1, published 2 Jun 2026)
- [CVE-2026-34371: LibreChat path traversal in execute_code artifact persistence](https://junglewise.ai/threats/cve-2026-34371-librechat-path-traversal-in-execute-code-artifact-persistence) (medium, CVSS 6.3, published 7 Apr 2026)
- [CVE-2026-31951: LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP…](https://junglewise.ai/threats/cve-2026-31951-librechat-is-a-chatgpt-clone-with-additional-features-in-versions) (medium, CVSS 6.8, published 27 Mar 2026)
- [CVE-2026-31950: LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming…](https://junglewise.ai/threats/cve-2026-31950-librechat-is-a-chatgpt-clone-with-additional-features-in-versions) (medium, CVSS 5.3, published 27 Mar 2026)
- [CVE-2026-31945: LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a…](https://junglewise.ai/threats/cve-2026-31945-librechat-is-a-chatgpt-clone-with-additional-features-versions-0) (high, CVSS 7.7, published 27 Mar 2026)
- [CVE-2026-31943: LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in…](https://junglewise.ai/threats/cve-2026-31943-librechat-is-a-chatgpt-clone-with-additional-features-prior-to) (high, CVSS 8.5, published 27 Mar 2026)
- [CVE-2026-4276: LibreChat RAG API log injection in file_id parameter](https://junglewise.ai/threats/cve-2026-4276-librechat-rag-api-log-injection-in-file-id-parameter) (high, CVSS 7.5, published 16 Mar 2026)
- [CVE-2025-66452: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON…](https://junglewise.ai/threats/cve-2025-66452-librechat-is-a-chatgpt-clone-with-additional-features-in-versions) (medium, CVSS 6.1, published 11 Dec 2025)
- [CVE-2025-66451: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON…](https://junglewise.ai/threats/cve-2025-66451-librechat-is-a-chatgpt-clone-with-additional-features-in-versions) (medium, CVSS 6.5, published 11 Dec 2025)
- [CVE-2025-66450: LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the…](https://junglewise.ai/threats/cve-2025-66450-librechat-is-a-chatgpt-clone-with-additional-features-in-versions) (medium, CVSS 5.4, published 11 Dec 2025)
- [CVE-2025-8849: LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the…](https://junglewise.ai/threats/cve-2025-8849-librechat-version-0-7-9-is-vulnerable-to-a-denial-of-service-dos) (high, CVSS 7.5, published 31 Oct 2025)
- [CVE-2025-8850: In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA)…](https://junglewise.ai/threats/cve-2025-8850-in-danny-avila-librechat-version-0-7-9-there-is-an-insecure-api) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2025-8848: A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When…](https://junglewise.ai/threats/cve-2025-8848-a-vulnerability-in-danny-avila-librechat-version-0-7-9-allows-for) (medium, CVSS 5.4, published 22 Oct 2025)

## Most severe LibreChat vulnerabilities

- [CVE-2026-32625: LibreChat environment variable exfiltration in MCP server integration](https://junglewise.ai/threats/cve-2026-32625-librechat-environment-variable-exfiltration-in-mcp-server) (critical, CVSS 9.6, published 2 Jun 2026)
- [CVE-2025-8850: In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA)…](https://junglewise.ai/threats/cve-2025-8850-in-danny-avila-librechat-version-0-7-9-there-is-an-insecure-api) (high, CVSS 8.8, published 30 Oct 2025)
- [CVE-2026-31943: LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.3, `isPrivateIP()` in…](https://junglewise.ai/threats/cve-2026-31943-librechat-is-a-chatgpt-clone-with-additional-features-prior-to) (high, CVSS 8.5, published 27 Mar 2026)
- [CVE-2026-54030: LibreChat token theft via missing OAuth resource validation in MCP](https://junglewise.ai/threats/cve-2026-54030-librechat-token-theft-via-missing-oauth-resource-validation-in) (high, CVSS 8, published 25 Jun 2026)
- [CVE-2026-31945: LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a…](https://junglewise.ai/threats/cve-2026-31945-librechat-is-a-chatgpt-clone-with-additional-features-versions-0) (high, CVSS 7.7, published 27 Mar 2026)
- [CVE-2026-54033: LibreChat SSRF via custom endpoint baseURL](https://junglewise.ai/threats/cve-2026-54033-librechat-ssrf-via-custom-endpoint-baseurl) (high, CVSS 7.7, published 25 Jun 2026)
- [CVE-2025-8849: LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the…](https://junglewise.ai/threats/cve-2025-8849-librechat-version-0-7-9-is-vulnerable-to-a-denial-of-service-dos) (high, CVSS 7.5, published 31 Oct 2025)
- [CVE-2026-4276: LibreChat RAG API log injection in file_id parameter](https://junglewise.ai/threats/cve-2026-4276-librechat-rag-api-log-injection-in-file-id-parameter) (high, CVSS 7.5, published 16 Mar 2026)
- [CVE-2026-31942: LibreChat IDOR in API keys management endpoint](https://junglewise.ai/threats/cve-2026-31942-librechat-idor-in-api-keys-management-endpoint) (high, CVSS 7.1, published 2 Jun 2026)
- [CVE-2026-31951: LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP…](https://junglewise.ai/threats/cve-2026-31951-librechat-is-a-chatgpt-clone-with-additional-features-in-versions) (medium, CVSS 6.8, published 27 Mar 2026)

## Vulnerabilities per week

Nothing was published in the last eight weeks.

| Week of | Vulns | Critical | Exploited |
| --- | --- | --- | --- |
| 17 Aug 2026 | 0 | 0 | 0 |
| 24 Aug 2026 | 0 | 0 | 0 |
| 31 Aug 2026 | 0 | 0 | 0 |
| 7 Sep 2026 | 0 | 0 | 0 |
| 14 Sep 2026 | 0 | 0 | 0 |
| 21 Sep 2026 | 0 | 0 | 0 |
| 28 Sep 2026 | 0 | 0 | 0 |
| 5 Oct 2026 | 0 | 0 | 0 |
| 12 Oct 2026 | 0 | 0 | 0 |
| 19 Oct 2026 | 0 | 0 | 0 |
| 26 Oct 2026 | 0 | 0 | 0 |
| 2 Nov 2026 | 0 | 0 | 0 |
| 9 Nov 2026 | 0 | 0 | 0 |

## LibreChat technologies

- [LibreChat](https://junglewise.ai/threats/technologies/librechat): 25 vulnerabilities

## Sources

NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "LibreChat vulnerabilities", https://junglewise.ai/threats/vendors/librechat, 9 November 2026.