CVE-2026-31945 Details
Description
LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack when using agent actions or MCP. Although a previous SSRF vulnerability (https://github.com/danny-avila/LibreChat/security/advisories/GHSA-rgjq-4q58-m3q8) was reported and patched, the fix only introduced hostname validation. It does not verify whether DNS resolution results in a private IP address. As a result, an attacker can still bypass the protection and gain access to internal resources, such as an internal RAG API or cloud instance metadata endpoints. Version 0.8.3-rc1 contains a patch.
A server-side request forgery (SSRF) vulnerability has been identified in LibreChat versions 0.8.2-rc2 through 0.8.2. This vulnerability arises when using agent actions or the MCP feature. The issue allows attackers to bypass hostname validation and access internal resources, such as private APIs or cloud instance metadata endpoints. The vulnerability exists because the application does not verify whether DNS resolutions lead to private IP addresses, leaving internal services exposed.
Users can update to LibreChat version 0.8.3-rc1, which includes a patch for this vulnerability. However, additional measures are recommended to validate DNS resolutions and prevent Time-of-Check to Time-of-Use attacks.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 30, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2 | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2 | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-918 | Server-Side Request Forgery (SSRF) | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| librechat librechat | 0.8.2 - 0.8.2 rc2 0.8.2 rc3 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 30, 2026 | Initial Analysis | [email protected] |
| Mar 30, 2026 | CVE Modified | CISA-ADP |
| Mar 27, 2026 | New CVE Received | [email protected] |