CVE-2026-31950 in danny-avila LibreChat

摘要 (英语)

LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming endpoint `/api/agents/chat/stream/:streamId` does not verify that the requesting user owns the stream. Any authenticated user who obtains or guesses a valid stream ID can subscribe and read another user's real-time chat content, including messages, AI responses, and tool invocations. Version 0.8.2 patches the issue.

负责

GitHub_M

预定

2026-03-10

披露

2026-03-27

条目

VulDB provides additional information and datapoints for this CVE:

标识符	漏洞	CWE	可利用	对策	CVE
354028	danny-avila LibreChat SSE Streaming stream 权限提升	284	未定义	官方修复	CVE-2026-31950