Vulnerabilities in LibreChat

2 results
CVE-2026-4276HIGHLibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.EPSS 0.3%CVE-2026-33265MEDIUMIn LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.EPSS 0.2%