← Back

CVE-2026-31951

nvd nist
Published: Mar 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.7
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
Exploitability: 2.1 / Impact: 3.6
Source: NVD

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP (Model Context Protocol) servers can include arbitrary HTTP headers that undergo credential placeholder substitution. An attacker can create a malicious MCP server with headers containing `{{LIBRECHAT_OPENID_ACCESS_TOKEN}}` (and others), causing victims who call tools on that server to have their OAuth tokens exfiltrated. Version 0.8.3-rc2 fixes the issue.

Affected (2)

Products: Librechat: Librechat
Librechat
1 product
Librechat
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Librechat
Librechat
From 0.8.2 to 0.8.3
Librechat
Version 0.8.3 rc1

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (1)

Source: security-advisories@github.com
ExploitVendor Advisory

Timeline

No history available yet.