PT-2026-28430 · Librechat · Librechat

Jaehonam · Published 2026-03-27 · Updated 2026-04-27 · CVE-2026-31945

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LibreChat versions 0.8.2-rc2 through 0.8.2

Description LibreChat, a ChatGPT clone with additional features, has a server-side request forgery (SSRF) issue in versions 0.8.2-rc2 through 0.8.2 when utilizing agent actions or MCP. A prior SSRF fix only implemented hostname validation and did not prevent DNS resolution to private IP addresses. This allows attackers to bypass the protection and access internal resources, such as an internal RAG API or cloud instance metadata endpoints. The vulnerable component does not verify whether DNS resolution results in a private IP address.

Recommendations Update to version 0.8.3-rc1 or later.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2026-31945

GHSA-F92M-JPV7-55P2

Affected Products

Librechat

References · 6

• 🔥 https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31945.json · Exploit
• https://osv.dev/vulnerability/CVE-2026-31945 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31945 · Security Note
• https://twitter.com/integ_sec/status/2048781843160293424 · Twitter Post
• https://twitter.com/CVEnew/status/2037719422941778313 · Twitter Post