CVE-2026-31950 in danny-avila LibreChat
Resumen (Inglés)
LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming endpoint `/api/agents/chat/stream/:streamId` does not verify that the requesting user owns the stream. Any authenticated user who obtains or guesses a valid stream ID can subscribe and read another user's real-time chat content, including messages, AI responses, and tool invocations. Version 0.8.2 patches the issue.
Responsable
GitHub_M
Reservar
2026-03-10
Divulgación
2026-03-27
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354028 | danny-avila LibreChat SSE Streaming stream escalada de privilegios | 284 | No está definido | Arreglo oficial | CVE-2026-31950 |