CVE-2026-32625

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the Model Context Protocol (MCP) server integration resolves ${VAR} placeholders against the server's process.env during Zod schema validation of user-supplied MCP server URLs. Any authenticated user can create a malicious MCP server configuration with a URL pointing to an attacker-controlled domain containing environment variable references, causing the LibreChat server to connect to the attacker's server and transmit critical secrets such as CREDS_KEY, CREDS_IV, JWT_SECRET, and MONGO_URI in the request URL. This enables full compromise of the installation's cryptographic materials and database credentials without requiring administrative privileges. This is patched in version 0.8.4-rc1.

• CWE-200

• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-4pcc-j6m6-wcwxExploit, Mitigation, Vendor Advisory
• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-4pcc-j6m6-wcwxExploit, Mitigation, Vendor Advisory

Published

Jun 2, 2026

Last Modified

Jul 22, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3262A vulnerability has been found in go2ismail Asp.Net-Core-Inv…8.8
• CVE-2026-32620Discourse is an open-source discussion platform. From versio…4.3
• CVE-2026-32621Apollo Federation is an architecture for declaratively compo…9.9
• CVE-2026-32622SQLBot is an intelligent data query system based on a large …8.8
• CVE-2026-32623xrdp is an open source RDP server. Versions through 0.10.5 c…8.1
• CVE-2026-32624xrdp is an open source RDP server. Versions through 0.10.5 c…6.5
• CVE-2026-32626AnythingLLM is an application that turns pieces of content i…9.6
• CVE-2026-32627cpp-httplib is a C++11 single-file header-only cross platfor…8.1
• CVE-2026-32628AnythingLLM is an application that turns pieces of content i…8.8
• CVE-2026-32629phpMyFAQ is an open source FAQ web application. Prior to ver…6.1
• CVE-2026-3263A vulnerability was found in go2ismail Asp.Net-Core-Inventor…8.8
• CVE-2026-32630file-type detects the file type of a file, stream, or data. …5.3