LibreChat 0.8.2 Release Candidate 1
Approved changes feed: RSS · Atom
cpe:2.3:a:librechat:librechat:0.8.2:rc1:*:*:*:*:*:*
part: a version: 0.8.2 update: rc1
| Vendor | Librechat (bb616292-ee82-5a16-87fc-6fa13690242e) |
|---|---|
| Product | Librechat (12871d92-73fd-5854-96c7-1c6a934fe8cd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-31944 |
vulnerable | 2026-06-08 07:57:16.138901 |
LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link
HIGH (7.6)
LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth callback endpoint accepts the redirect from the identity provider and stores OAuth tokens for the user who initiated the flow, without verifying that the browser hitting the redirect URL is logged in or that the logged-in user matches the initiator. An attacker can send the authorization URL to a victim; when the victim completes the flow, the victim’s OAuth tokens are stored on the attacker’s LibreChat account, enabling account takeover of the victim’s MCP-linked services (e.g. Atlassian, Outlook). This vulnerability is fixed in 0.8.3-rc1.
Published: 2026-03-13T19:44:30.850Z
Updated: 2026-03-16T13:41:21.254Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-22252 |
vulnerable | 2026-06-08 07:49:17.781314 |
LibreChat MCP Stdio Remote Command Execution
CRITICAL (9.1)
LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.
Published: 2026-01-12T18:01:48.399Z
Updated: 2026-01-12T18:48:33.821Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.