Librechat

Librechat

45 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-66452

Exploit
  • EPSS 0.18%
  • Veröffentlicht 11.12.2025 22:52:20
  • Zuletzt bearbeitet 15.12.2025 17:35:25

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, there is no handler for JSON parsing errors; SyntaxError from express.json() includes user input in the error message, which gets reflected in responses. User input (...

6.5

CVE-2025-66451

Exploit
  • EPSS 0.28%
  • Veröffentlicht 11.12.2025 22:33:24
  • Zuletzt bearbeitet 15.12.2025 17:51:16

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the reque...

5.4

CVE-2025-66450

Exploit
  • EPSS 0.18%
  • Veröffentlicht 11.12.2025 22:05:47
  • Zuletzt bearbeitet 15.12.2025 17:57:48

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then b...

8.1

CVE-2025-66201

Exploit
  • EPSS 0.25%
  • Veröffentlicht 29.11.2025 01:26:18
  • Zuletzt bearbeitet 03.12.2025 21:49:38

LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by passing specially crafted OpenAPI specs to its "Actions" feature and making the LLM use those actions...

7.5

CVE-2025-8849

Exploit
  • EPSS 0.29%
  • Veröffentlicht 30.10.2025 23:42:41
  • Zuletzt bearbeitet 10.11.2025 17:14:43

LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null...

8.8

CVE-2025-8850

Exploit
  • EPSS 0.38%
  • Veröffentlicht 30.10.2025 19:59:36
  • Zuletzt bearbeitet 19.11.2025 15:27:48

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process....

5.4

CVE-2025-8848

Exploit
  • EPSS 0.42%
  • Veröffentlicht 22.10.2025 13:54:00
  • Zuletzt bearbeitet 30.10.2025 17:34:52

A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When a logged-in user sends an HTTP GET request with a crafted Accept-Language header, arbitrary HTML can be injected into the <html lang...

7.5

CVE-2025-7104

Exploit
  • EPSS 0.28%
  • Veröffentlicht 29.09.2025 17:15:32
  • Zuletzt bearbeitet 16.10.2025 16:45:42

A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields w...

5.3

CVE-2025-7106

  • EPSS 0.26%
  • Veröffentlicht 23.09.2025 10:15:34
  • Zuletzt bearbeitet 20.10.2025 19:00:25

danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `checkAccess` function in `api/server/middleware/roles/access.js` uses `permissions.some()` to validate permissions, which incorrect...

3.1

CVE-2025-6088

Exploit
  • EPSS 0.27%
  • Veröffentlicht 11.09.2025 00:43:51
  • Zuletzt bearbeitet 16.10.2025 16:00:19

In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated ser...