Librechat

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 44
    Known Exploited: 0
    7
    Critical Level Threats
    17
    High Level Threats
    19
    Medium Level Threats
    1
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-44654

    LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents

    Last Modified: Jun 04, 2026
    Published: Jun 02, 2026

    CVE-2026-44653

    LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets

    Last Modified: Jun 04, 2026
    Published: Jun 02, 2026

    CVE-2026-32625

    LibreChat Exfiltrates Server Secrets via MCP Server URL Injection

    Last Modified: Jun 04, 2026
    Published: Jun 02, 2026

    CVE-2026-31942

    LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys

    Last Modified: Jun 04, 2026
    Published: Jun 02, 2026

    CVE-2026-34371

    LibreChat Affected by Arbitrary File Write via `execute_code` Artifact Filename Traversal

    Last Modified: Apr 15, 2026
    Published: Apr 07, 2026
    Items Per Page