Product by Danny-avila
LibreChat
47 known vulnerabilities in LibreChat (Danny-avila), 0 of them actively exploited (CISA KEV).
Key figures
47
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
6
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-69222 | LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions | 9.1 | |
| Critical | CVE-2026-32625 | LibreChat Exfiltrates Server Secrets via MCP Server URL Injection | 9.6 | |
| Critical | CVE-2026-22252 | LibreChat MCP Stdio Remote Command Execution | 9.1 | |
| High | CVE-2024-11170 | Path Traversal in danny-avila/librechat | 8.8 | |
| Critical | CVE-2024-10361 | Arbitrary File Deletion via Path Traversal in danny-avila/librechat | 8.1 | |
| High | CVE-2024-11172 | Denial of Service in danny-avila/librechat | 7.5 | |
| High | CVE-2024-11169 | Unhandled Exception Leading to Server Crash in danny-avila/librechat | 7.5 | |
| Critical | CVE-2024-11167 | Improper Access Control in danny-avila/librechat | 9.4 | |
| Medium | CVE-2024-11173 | Unhandled Exception in danny-avila/librechat | 6.5 | |
| High | CVE-2026-54036 | LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification | 8.1 | |
| Medium | CVE-2026-54037 | Danny-avila LibreChat: Allocation of Resources Without Limits or Throttling | 6.5 | |
| Critical | CVE-2026-54030 | LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow | 9.3 | |
| Medium | CVE-2026-54024 | Danny-avila LibreChat: Allocation of Resources Without Limits or Throttling | 6.5 | |
| High | CVE-2024-11171 | Improper Input Validation in danny-avila/librechat | 7.5 | |
| High | CVE-2025-41258 | LibreChat RAG API Authentication Bypass | 8.0 | |
| High | CVE-2025-54868 | LibreChat exposes arbitrary chats through Meilisearch engine | 7.5 | |
| High | CVE-2026-44654 | Danny-avila LibreChat: Incorrect Authorization | 8.1 | |
| High | CVE-2025-66201 | LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability | 8.1 | |
| High | CVE-2026-31943 | LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP | 8.5 | |
| High | CVE-2026-54033 | Danny-avila LibreChat: Server-Side Request Forgery (SSRF) | 6.5 | |
| High | CVE-2026-54040 | LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass | 7.1 | |
| Medium | CVE-2026-54027 | Danny-avila LibreChat: Missing Authorization | 6.5 | |
| Medium | CVE-2026-31949 | LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos | 6.5 | |
| High | CVE-2025-66450 | LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload | 5.4 | |
| High | CVE-2026-31945 | LibreChat Server-Side Request Forgery using DNS resolution | 7.7 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,