| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | Incorrect Access Control check results in authorization bypass | 25 Jun 202509:54 | – | huntr |
 | LibreChat access control vulnerability | 23 Sep 202500:00 | – | cnnvd |
 | CVE-2025-7106 Authorization Bypass due to Incorrect Access Control in danny-avila/librechat | 23 Sep 202509:54 | – | cvelist |
 | EUVD-2025-30885 | 3 Oct 202520:07 | – | euvd |
 | CVE-2025-7106 | 23 Sep 202509:54 | – | mend |
 | CVE-2025-7106 | 23 Sep 202510:15 | – | nvd |
 | CVE-2025-7106 Authorization Bypass due to Incorrect Access Control in danny-avila/librechat | 23 Sep 202509:54 | – | osv_cve |
 | PT-2025-39160 | 23 Sep 202500:00 | – | ptsecurity |
 | CVE-2025-7106: Improper Access Control | 23 Sep 202500:00 | – | rapid7 |
 | CVE-2025-7106 | 25 Sep 202515:49 | – | redhatcve |
10
[
{
"vendor": "danny-avila",
"product": "danny-avila/librechat",
"versions": [
{
"version": "unspecified",
"lessThan": "v0.7.9",
"status": "affected",
"versionType": "custom"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| permissions | request body | /api/agents | Authorization bypass in agent creation where the system incorrectly grants access if only one of multiple required permissions (e.g., 'USE' or 'CREATE') is present. | CWE-284, CWE-639 |
| permissions | request body | /api/prompts | Authorization bypass in prompt management where the system incorrectly grants access if only one of multiple required permissions is present. | CWE-284, CWE-639 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Oct 2026 20:10Current
5.8Medium risk
Vulners AI Score5.8
CVSS 3.15.3
CVSS 35.3
EPSS0.00278
SSVC