All 31 CVE vulnerabilities found in LibreChat, with AI-generated Chinese analysis, references, and POCs.
This page aggregates security vulnerabilities associated with LibreChat, an open-source conversational AI interface, focusing primarily on software flaws and misconfigurations. The collection encompasses a wide spectrum of security issues, ranging from authentication bypasses and insecure data handling to server-side request forgery, covering the product's entire public release history from its initial launch to the present day. Visitors can utilize this resource to track official vendor advisories, understand the specific characteristics of common weakness classes affecting conversational AI platforms, and review the complete vulnerability timeline for LibreChat to assess historical risk exposure. The data presented here is derived from public security bulletins and community reports, offering a centralized view for security professionals, developers, and system administrators responsible for maintaining LibreChat deployments. By consolidating these findings, the page facilitates efficient threat analysis and supports informed decision-making regarding patch prioritization and defensive configuration strategies. Users seeking detailed technical specifications or remediation guidance for specific incidents will find direct references to authoritative sources within each entry. This compilation aims to enhance the overall security posture of the LibreChat ecosystem by providing transparent access to known threats without requiring navigation across multiple disparate reporting channels.
Vendor: danny-avila
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-54868 | LibreChat exposes arbitrary chats through Meilisearch engine CWE-285 | 7.5 | High | 2025-08-05 |
All 31 known CVE vulnerabilities affecting LibreChat with full Chinese analysis, references, and POCs where available.