PT-2026-45882 · Librechat · Librechat

Logggg2402 · Published 2026-06-02 · Updated 2026-06-03 · CVE-2026-44653

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.4

Description Users with only VIEW access to an MCP server can retrieve decrypted admin-managed secrets. This occurs through the endpoints "/api/mcp/servers" and "/api/mcp/servers/:serverName", where the returned configuration includes plaintext values for the variables apiKey.key and oauth.client secret. This allows unauthorized users to exfiltrate provider credentials.

Recommendations Update to version 0.8.4. Redact apiKey.key and oauth.client secret from all API responses. Avoid returning decrypted admin-managed secrets to non-owners, using boolean presence indicators or server-side placeholders instead.

Exploit

Fix

Weakness Enumeration

CWE-201

Related Identifiers

CVE-2026-44653

Affected Products

Librechat

References · 5

• 🔥 https://github.com/danny-avila/LibreChat/security/advisories/GHSA-6vqg-rgpm-qvf9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-44653 · Security Note
• https://t.me/CVEtracker/55676 · Telegram Post
• https://twitter.com/CVEnew/status/2061993201183949297 · Twitter Post
• https://t.me/cveNotify/165875 · Telegram Post