CVE-2026-54030 Details
Description
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from OAuth Protected Resource metadata (RFC 9728) matches the configured MCP server URL, allowing a malicious MCP server to steal access tokens intended for a legitimate server. This vulnerability is fixed in 0.8.5.
A vulnerability in LibreChat's MCP OAuth implementation prior to version 0.8.5 allows a malicious MCP server to steal access tokens by exploiting a lack of validation on the resource parameter from OAuth Protected Resource metadata. This vulnerability arises because the resource parameter is added to the authorization URL without ensuring it matches the configured MCP server URL. As a result, an attacker-controlled MCP server can deceive the application into initiating an OAuth flow that ultimately redirects access tokens to the attacker.
Users should update to LibreChat version 0.8.5 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 26, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gvpj-vm2f-2m23 | CISA-ADP | ExploitVendor Advisory |
| https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gvpj-vm2f-2m23 | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-346 | Origin Validation Error | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| librechat librechat | <= 0.8.4 0.8.5 rc1 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 29, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | CVE Modified | CISA-ADP |
| Jun 25, 2026 | New CVE Received | [email protected] |