Summaryinfo

A vulnerability classified as critical has been found in danny-avila LibreChat up to 0.8.2/0.8.2-rc2/0.8.3-rc1. Affected is an unknown function of the component DNS Resolution Handler. Performing a manipulation results in server-side request forgery. This vulnerability is known as CVE-2026-31945. Remote exploitation of the attack is possible. No exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in danny-avila LibreChat up to 0.8.2/0.8.2-rc2/0.8.3-rc1. This affects some unknown processing of the component DNS Resolution Handler. The manipulation with an unknown input leads to a server-side request forgery vulnerability. CWE is classifying the issue as CWE-918. The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack when using agent actions or MCP. Although a previous SSRF vulnerability (https://github.com/danny-avila/LibreChat/security/advisories/GHSA-rgjq-4q58-m3q8) was reported and patched, the fix only introduced hostname validation. It does not verify whether DNS resolution results in a private IP address. As a result, an attacker can still bypass the protection and gain access to internal resources, such as an internal RAG API or cloud instance metadata endpoints. Version 0.8.3-rc1 contains a patch.

The advisory is shared at github.com. This vulnerability is uniquely identified as CVE-2026-31945 since 03/10/2026. The exploitability is told to be easy. It is possible to initiate the attack remotely. Neither technical details nor an exploit are publicly available.

Upgrading to version 0.8.3-rc1 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Chat Software

Vendor

• danny-avila

Name

• LibreChat

Version

• 0.8.0
• 0.8.1
• 0.8.2
• 0.8.2-rc1
• 0.8.2-rc2
• 0.8.3-rc1

Website

• Product: https://github.com/danny-avila/LibreChat/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion