CVE-2026-31945
Description
LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack when using agent actions or MCP. Although a previous SSRF vulnerability (https://github.com/danny-avila/LibreChat/security/advisories/GHSA-rgjq-4q58-m3q8) was reported and patched, the fix only introduced hostname validation. It does not verify whether DNS resolution results in a private IP address. As a result, an attacker can still bypass the protection and gain access to internal resources, such as an internal RAG API or cloud instance metadata endpoints. Version 0.8.3-rc1 contains a patch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:librechat:librechat:0.8.2:-:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:librechat:librechat:0.8.2:-:*:*:*:*:*:*
- cpe:2.3:a:librechat:librechat:0.8.2:rc2:*:*:*:*:*:*
- cpe:2.3:a:librechat:librechat:0.8.2:rc3:*:*:*:*:*:*
- (no CPE)range: 0.8.2-rc2 - 0.8.2
- (no CPE)range: >= 0.8.2-rc2, < 0.8.3-rc1
Patches
Vulnerability mechanics
References
1- github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2nvdExploitMitigationVendor Advisory
News mentions
0No linked articles in our index yet.