CVE-2026-54033

Published: Jun 25, 2026Modified: Jun 29, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, LibreChat allows users to configure custom OpenAI-compatible API endpoints by setting a baseURL. This URL is used to construct HTTP requests without any SSRF validation — no private IP check, no scheme restriction, no DNS pinning. An authenticated user can set baseURL to internal network addresses. This vulnerability is fixed in 0.8.4-rc1.

Affected (1)

Products: Librechat: Librechat

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Librechat Librechat	Up to 0.8.3

Related CWEs

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gc9r-88c3-7qhq

Source: security-advisories@github.com

ExploitMitigationVendor Advisory

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gc9r-88c3-7qhq

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

ExploitMitigationVendor Advisory

Timeline

No history available yet.