LibreChat 访问控制错误漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. LibreChat suffers from an Access Control Error vulnerability that stems from the checkAccess function in api/server/middleware/roles/access.js that uses permissions.some for permission validation, resulting in improper acce...

PT-2025-39160

Name of the Vulnerable Software and Affected Versions librechat versions prior to the fix Description An authorization bypass exists due to incorrect access control checks. The checkAccess function within api/server/middleware/roles/access.js utilizes permissions.some for permission validation,...

CVE-2001-1367

The CVE-2001-1367 entry concerns PHPSlice, specifically the checkAccess function. Affected versions 0.1.1 through 0.1.6 (including 0.1.4) do not properly verify administrative access level, enabling remote attackers to gain privileges. Documented impact is privilege escalation. A temporary mitiga...