Intel

CVE-2026-54036

LibreChat ist ein verbessertes ChatGPT-Klonprodukt, das mehrere AI-Anbieter unterstützt.

mediumEPSS 0.4%

Description

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the GET /api/auth/2fa/enable endpoint can be called by an authenticated user (or attacker with a stolen session) even when 2FA is already fully enabled on the account. This endpoint overwrites the existing TOTP secret, generates new backup codes, and sets twoFactorEnabled to false — all without requiring any TOTP or backup code verification. An attacker with a valid session token can completely take over a victim's 2FA, locking the legitimate user out of their own two-factor authentication. This vulnerability is fixed in 0.8.4-rc1.

Source: cvelistv5NVD (NIST)CVE.org (MITRE)

Metrics

XIEM Effective CVSS
5.3
Source: nvd-v3
EPSS percentile
30.3 %
Elevated — this CVE ranks above at least 10% of all CVEs scored today.
KEV status
—
Show all metrics
Severity
medium
Priority score
54.58
Exploit maturity
no public PoC known
CVSS v3
5.3
EPSS score
0.4 %
Low — model estimates < 1% exploitation likelihood.
Published
2026-06-25 16:16 UTC
CWE
CWE-306

Weakness classes (CWE)

  • CWE-306Base

    Missing Authentication for Critical Function

    The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

    cwe.mitre.org →

References & sources

Reanalysis & status changes

Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.

  1. CVE Modified2026-06-25 17:16 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
    • Reference: https://github.com/danny-avila/LibreChat/security/advisories/GHSA-45fp-6q26-wfgq
    • SSVC: {"id":"CVE-2026-54036","role":"CISA Coordinator","options":[{"exploitation":"poc"},{"automatable":"no"},{"technicalIm…
  2. New CVE Received2026-06-25 16:16 UTC· security-advisories@github.com
    • Affected: LibreChat
    • Description: LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the GET /api/auth/2fa/enable endpoint can be called by an authenticated user (or attacker with a stolen session) even when 2FA is already fully enabled on the account. This endpoint overwrites the existing TOTP secret, generates new backup codes, and sets twoFactorEnabled to false — all without requiring any TOTP or backup code verification. An attacker with a valid session token can completely take over a victim's 2FA, locking the legitimate user out of their own two-factor authentication. This vulnerability is fixed in 0.8.4-rc1.
    • CVSS V3.1: AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
    • CWE: CWE-306