A vulnerability classified as critical was found in danny-avila LibreChat up to 0.8.2-rc3. This issue affects some unknown processing of the component Model Context Protocol OAuth Callback Endpoint. The manipulation results in missing authentication.
This vulnerability is identified as CVE-2026-31944. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-31944 | danny-avila LibreChat up to 0.8.2-rc3 Model Context Protocol OAuth Callback Endpoint missing authentication (GHSA-vf7j-7mrx-hp7g)
A vulnerability classified as critical was found in danny-avila LibreChat up to 0.8.2-rc3. This issue affects some unknown processing of the component Model Context Protocol OAuth Callback Endpoint. The manipulation results in missing…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR