| Component | LibreChat |
| Severity | high (CVSS 7.5) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| Published (NVD) | 2025-09-29 |
| Last modified | 2026-10-09 |
| Affected versions | < 0.7.9 from the CVE Program record written by the CNA that assigned the CVE |
| Fixed in | 0.7.9 |
| Weakness | CWE-915 |
| CISA KEV | not listed |
NVD description
A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra fields in the request body are included in agentData and passed to the database layer, allowing overwriting of any field in the schema, such as author, access_level, isCollaborative, and projectIds. Additionally, the Object.Prototype can be polluted due to the use of Object.assign with spread operators.
What to do
- Upgrade LibreChat to
0.7.9or later. - Do not expose the component's API or UI to the internet without authentication in front of it.