CVE-2026-54030

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.5, LibreChat's MCP OAuth implementation does not validate that the resource parameter from OAuth Protected Resource metadata (RFC 9728) matches the configured MCP server URL, allowing a malicious MCP server to steal access tokens intended for a legitimate server. This vulnerability is fixed in 0.8.5.

CVSS 3.1

9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

EPSS

0.2% chance of exploitation in the next 30 days; higher than 5% of CVEs (scores of 2026-10-25)

CWE

CWE-346

Published

2026-06-25

Modified

2026-10-25

Record from

the NVD, synced 2026-10-25

Affected

• librechat:librechat

References

• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gvpj-vm2f-2m23
• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-gvpj-vm2f-2m23

Check your stackJSON