CVE-2026-54025

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, there is a vulnerability in LibreChat's markdown artifact preview pipeline. The marked library v15.0.12 does not HTML-escape double-quote characters in image alt text when a custom renderer falls through to the default renderer. LibreChat's generateMarkdownHtml function (in client/src/utils/markdown.ts) installs a custom image renderer that returns false for URLs passing the isSafeUrl allowlist check, which causes marked to fall back to its built-in renderer. That built-in renderer inserts the raw alt text into the alt="..." attribute without escaping double-quote characters. An attacker can craft an alt text such as " onload="payload to break out of the attribute and inject an arbitrary event handler. The resulting HTML is then assigned to document.getElementById('content').innerHTML inside the Sandpack preview iframe, causing the payload to execute in the victim's browser. This vulnerability is fixed in 0.8.4-rc1.

• CWE-79

• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-3phr-62qf-cxf3Exploit, Mitigation, Vendor Advisory
• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-3phr-62qf-cxf3Exploit, Mitigation, Vendor Advisory

Published

Jun 25, 2026

Last Modified

Jun 29, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-54019Open WebUI is a self-hosted artificial intelligence platform…6.5
• CVE-2026-5402TLS protocol dissector heap overflow in Wireshark 4.6.0 to 4…8.8
• CVE-2026-54020Open WebUI is an extensible, feature-rich, and user-friendly…6.3
• CVE-2026-54021Open WebUI is a self-hosted artificial intelligence platform…6.3
• CVE-2026-54022Open WebUI is a self-hosted artificial intelligence platform…5.3
• CVE-2026-54024LibreChat is an enhanced ChatGPT clone that supports multipl…6.5
• CVE-2026-54027LibreChat is an enhanced ChatGPT clone that supports multipl…6.5
• CVE-2026-54029LibreChat is an enhanced ChatGPT clone that supports multipl…6.5
• CVE-2026-5403SBC codec crash in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4…7.8
• CVE-2026-54030LibreChat is an enhanced ChatGPT clone that supports multipl…9.3
• CVE-2026-54033LibreChat is an enhanced ChatGPT clone that supports multipl…6.5
• CVE-2026-54036LibreChat is an enhanced ChatGPT clone that supports multipl…8.1