CVE-2026-54030

Published: Jun 25, 2026Modified: Jun 29, 2026

9.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Exploitability: 2.8 / Impact: 5.8

Source: NVD

Description

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from OAuth Protected Resource metadata (RFC 9728) matches the configured MCP server URL, allowing a malicious MCP server to steal access tokens intended for a legitimate server. This vulnerability is fixed in 0.8.5.

Affected (2)

Products: Librechat: Librechat

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Librechat Librechat	Up to 0.8.4
Librechat Librechat	Version 0.8.5 rc1

Related CWEs

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (2)

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gvpj-vm2f-2m23

Source: security-advisories@github.com

ExploitVendor Advisory

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gvpj-vm2f-2m23

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitVendor Advisory

Timeline

No history available yet.