PT-2026-28430 · Librechat · Librechat

Jaehonam · Publicado 2026-03-27 · Atualizado 2026-04-27 · CVE-2026-31945

Positive Technologies (AI Summary)

CVSS v3.1

7.7

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LibreChat versions 0.8.2-rc2 through 0.8.2

Description LibreChat, a ChatGPT clone with additional features, has a server-side request forgery (SSRF) issue in versions 0.8.2-rc2 through 0.8.2 when utilizing agent actions or MCP. A prior SSRF fix only implemented hostname validation and did not prevent DNS resolution to private IP addresses. This allows attackers to bypass the protection and access internal resources, such as an internal RAG API or cloud instance metadata endpoints. The vulnerable component does not verify whether DNS resolution results in a private IP address.

Recommendations Update to version 0.8.3-rc1 or later.

Exploit

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2026-31945

GHSA-F92M-JPV7-55P2

Produtos afetados

Librechat

Referências · 6

• 🔥 https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31945.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-31945 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-31945 · Nota de Segurança
• https://twitter.com/integ_sec/status/2048781843160293424 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2037719422941778313 · Publicação no Twitter