Danny Avila/Librechat
Approved changes feed: RSS · Atom
cpe:2.3:a:danny-avila:danny-avila/librechat:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Danny Avila (5b03b707-0ea1-53a2-8a49-7eae48584426) |
|---|---|
| Product | Danny Avila/Librechat (2b0ca39a-513f-581e-8f97-639a06d3a719) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8850 |
vulnerable | 2026-06-08 07:45:21.311926 |
Insecure API Design in danny-avila/librechat
LOW (3.1)
In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly validate the OTP or backup code when the API endpoint '/api/auth/2fa/disable' is directly accessed. This flaw can be exploited by authenticated users to weaken the security of their own accounts, although it does not lead to full account compromise.
Published: 2025-10-30T19:59:36.327Z
Updated: 2025-11-05T14:57:26.783Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8849 |
vulnerable | 2026-06-08 07:45:21.311532 |
Denial of Service in danny-avila/librechat
MEDIUM (5.4)
LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessively large values are submitted. This results in the inability to create new memories, impacting the stability of the service.
Published: 2025-10-30T23:42:41.552Z
Updated: 2025-10-31T15:09:34.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8848 |
vulnerable | 2026-06-08 07:45:21.310251 |
HTML Injection in Accept-Language Header in danny-avila/librechat
MEDIUM (4.8)
A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When a logged-in user sends an HTTP GET request with a crafted Accept-Language header, arbitrary HTML can be injected into the <html lang=""> tag of the response. This can lead to potential security risks such as cross-site scripting (XSS) attacks.
Published: 2025-10-22T13:54:00.389Z
Updated: 2025-10-30T18:22:51.121Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7106 |
vulnerable | 2026-06-08 07:43:18.011083 |
Authorization Bypass due to Incorrect Access Control in danny-avila/librechat
MEDIUM (5.3)
danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `checkAccess` function in `api/server/middleware/roles/access.js` uses `permissions.some()` to validate permissions, which incorrectly grants access if only one of multiple required permissions is present. This allows users with the 'USER' role to create agents despite having `CREATE: false` permission, as the check for `['USE', 'CREATE']` passes with just `USE: true`. This vulnerability affects other permission checks as well, such as `PROMPTS`. The issue is present in all versions prior to the fix.
Published: 2025-09-23T09:54:33.716Z
Updated: 2025-09-23T19:29:47.785Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7105 |
vulnerable | 2026-06-08 07:43:18.010822 |
Denial of Service via JavaScript Memory Overflow in danny-avila/librechat
MEDIUM (5.7)
A vulnerability in danny-avila/librechat allows attackers to exploit the unrestricted Fork Function in `/api/convos/fork` to fork numerous contents rapidly. If the forked content includes a Mermaid graph with a large number of nodes, it can lead to a JavaScript heap out of memory error upon service restart, causing a denial of service. This issue affects the latest version of the product.
Published: 2026-02-02T10:36:24.368Z
Updated: 2026-02-02T13:19:12.269Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7104 |
vulnerable | 2026-06-08 07:43:18.008184 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-6088 |
vulnerable | 2026-06-08 07:43:14.245078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12580 |
vulnerable | 2026-06-08 06:25:35.581750 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11173 |
vulnerable | 2026-06-08 06:23:48.984174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11172 |
vulnerable | 2026-06-08 06:23:48.983777 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11171 |
vulnerable | 2026-06-08 06:23:48.983407 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11170 |
vulnerable | 2026-06-08 06:23:48.983009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11169 |
vulnerable | 2026-06-08 06:23:48.982463 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11167 |
vulnerable | 2026-06-08 06:23:48.979368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10366 |
vulnerable | 2026-06-08 06:22:04.062352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10363 |
vulnerable | 2026-06-08 06:22:04.059642 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10361 |
vulnerable | 2026-06-08 06:22:04.057337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10359 |
vulnerable | 2026-06-08 06:22:04.054134 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.