CVE-2025-8850

In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly validate the OTP or backup code when the API endpoint '/api/auth/2fa/disable' is directly accessed. This flaw can be exploited by authenticated users to weaken the security of their own accounts, although it does not lead to full account compromise.

• CWE-440

• https://github.com/danny-avila/librechat/commit/7e4c8a5d0d2dbe5bf8fd272ff6acafb27d24744fPatch
• https://huntr.com/bounties/8e615709-f4de-41e2-b194-f0d91ed7c75eExploit, Patch, Third Party Advisory

Published

Oct 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8844A vulnerability was determined in NASM Netwide Assember 2.17…5.5
• CVE-2025-8845A vulnerability was identified in NASM Netwide Assember 2.17…7.8
• CVE-2025-8846A vulnerability has been found in NASM Netwide Assember 2.17…7.8
• CVE-2025-8847A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1…5.4
• CVE-2025-8848A vulnerability in danny-avila/librechat version 0.7.9 allow…5.4
• CVE-2025-8849LibreChat version 0.7.9 is vulnerable to a Denial of Service…7.5
• CVE-2025-8851A vulnerability was determined in LibTIFF up to 4.5.1. Affec…5.3
• CVE-2025-8852A vulnerability was identified in WuKongOpenSource WukongCRM…4.3
• CVE-2025-8853Official Document Management System developed by 2100 Techno…9.8
• CVE-2025-8854Stack-based buffer overflow in LoadOFF in bulletphysics bull…9.8
• CVE-2025-8855Authorization Bypass Through User-Controlled Key, Weak Passw…8.1
• CVE-2025-8857Clinic Image System developed by Changing contains hard-code…9.8