CVE-2026-33265

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API...

EUVD-2025-37197

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication 2FA flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend do...

CVE-2025-8850 Insecure API Design in danny-avila/librechat

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication 2FA flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend do...

EUVD-2025-7108

Malicious code in bioql PyPI...

EUVD-2025-7104

Malicious code in bioql PyPI...

CVE-2024-11169

An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash...

CVE-2024-10359

In danny-avila/librechat v0.7.5-rc2, a vulnerability exists in the preset creation functionality where a user can manipulate the user ID field via mass assignment. The root cause is that the backend saves the entire object received without validating attributes/values, allowing an attacker to inj...

CVE-2024-10363

CVE-2024-10363 affects the LibreChat project (danny-avila/LibreChat) version 0.7.5. The vulnerability is an improper access control that allows users to share, use, and create prompts without admin authorization, potentially breaking application logic and permissions and enabling unauthorized act...

CVE-2024-10366 IDOR in delete attachments in danny-avila/librechat

An improper access control vulnerability IDOR exists in the delete attachments functionality of danny-avila/librechat version v0.7.5-rc2. The endpoint does not verify whether the provided attachment ID belongs to the current user, allowing any authenticated user to delete attachments of other use...