CVE Tools
Track your stack

Librechat

51 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Librechat, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Librechat CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Librechat CVEs per month
MonthCVEs
2024-110
2024-120
2025-010
2025-020
2025-0311
2025-040
2025-050
2025-060
2025-070
2025-081
2025-093
2025-103
2025-111
2025-123
2026-014
2026-020
2026-039
2026-041
2026-050
2026-0613
2026-070
2026-080
2026-090
2026-100

Severity

How the 51 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical612%
  • High1937%
  • Medium2549%
  • Low12%

Latest CVEs

The 15 most recently published vulnerabilities affecting Librechat.

  1. CVE-2026-54024LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits6.5
  2. CVE-2026-54025LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview5.4
  3. CVE-2026-54027LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization6.5
  4. CVE-2026-54029LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter5.3
  5. CVE-2026-54033LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs7.7
  6. CVE-2026-54037LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork6.5
  7. CVE-2026-54030LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow8.0
  8. CVE-2026-54040LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass5.9
  9. CVE-2026-54036LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification5.3
  10. CVE-2026-44654LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents8.1
  11. CVE-2026-44653LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets6.5
  12. CVE-2026-32625LibreChat Exfiltrates Server Secrets via MCP Server URL Injection9.6
  13. CVE-2026-31942LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys7.1
  14. CVE-2026-34371LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal6.3
  15. CVE-2026-31951LibreChat's MCP Server Header Injection Enables OAuth Token Theft6.8

Product grouping is registry-driven, with AI assist and human review. How it works