CVE-2026-31944General(librechat / librechat)

LOWCVSS 7.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch librechat librechat systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth callback endpoint accepts the redirect from the identity provider and stores OAuth tokens for the user who initiated the flow, without verifying that the browser hitting the redirect URL is logged in or that the logged-in user matches the initiator. An attacker can send the authorization URL to a victim; when the victim completes the flow, the victim’s OAuth tokens are stored on the attacker’s LibreChat account, enabling account takeover of the victim’s MCP-linked services (e.g. Atlassian, Outlook). This vulnerability is fixed in 0.8.3-rc1.

librechat CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-vf7j-7mrx-hp7g

Weakness type (CWE)

CWE-306

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

librechat

Threat summary

Patch or workaround signal is available
4 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 3d ago at 1 mentions (2026-03-13); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

librechat

Products

librechat

1 version affected across 1 product

Deep dive

Activity timeline4 mentions / 4d

Signal classification3 categories

General

250.0%

Disclosure

125.0%

Patch

125.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-13	1	Disclosure1
2026-03-14	1	Patch1
2026-03-15	1	General1
2026-03-18	1	General1

Full discourse4 posts

ナタリー 🌙@natalie_avfieb208d
Patch
CVE-2026-31944: LibreChat MCP OAuth had no session binding. Attacker sends you an auth URL → you complete the flow → attacker owns your Atlassian/Outlook tokens. Classic confused deputy, MCP edition. CVSS 7.6 HIGH. Fixed in 0.8.3-rc1.
Post summary
The text describes a confusion deputy flaw in LibreChat MCP OAuth that can expose Atlassian/Outlook tokens, provides a CVSS score, and notes the vulnerability has been fixed in version 0.8.3-rc1.
0001084
79 followersView on X
Prateek Tomar@Prateektomar205d
General
Security deep dive: Critical Analysis CVE-2026-31944 - LibreChat is a ChatGPT clone with.... Actionable advice for practitioners. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-31944-librechat-is-a-chatgpt-clone-with-additional-features-from-march-18 #CyberSe
Post summary
The snippet promotes a blog deep‑dive on CVE‑2026‑31944 with actionable advice, but contains no PoC, exploit, patch, or detailed technical data in the excerpt.
0000037
97 followersView on X
Prateek Tomar@Prateektomar208d
General
Security deep dive: Critical Analysis CVE-2026-31944 - LibreChat is a ChatGPT clone with.... Actionable advice for practitioners. Read more: https://threatops.tech/blog/critical-analysis-cve-2026-31944-librechat-is-a-chatgpt-clone-with-additional-features-from-march-15 #CyberSe
Post summary
The post announces a security deep dive into CVE‑2026‑31944 related to LibreChat but offers no concrete exploit details, mitigation advice, or evidence of active exploitation.
0000053
97 followersView on X
CVE@CVEnew209d
Disclosure
CVE-2026-31944 LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth callback endpoint accepts the redirect from the… https://www.cve.org/CVERecord?id=CVE-2026-31944
Post summary
The post announces CVE-2026-31944, highlighting an issue with LibreChat’s OAuth callback in specific releases, but offers no exploitation or mitigation details.
00000170
56.7K followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	librechat	librechat	0.8.2	-	-
App	librechat	librechat	0.8.2	-	-
App	librechat	librechat	0.8.2	-	-
App	librechat	librechat	0.8.2	-	-

Explore more

Back to dashboard librechat CVEs librechat vulnerabilities

What researchers are saying

CVE-2026-31944

Prateek Tomar[verified]@PrateektomarGeneral

The snippet promotes a blog deep‑dive on CVE‑2026‑31944 with actionable advice, but contains no PoC, exploit, patch, or detailed technical data in the excerpt.

Prateek Tomar[verified]@PrateektomarGeneral

The post announces a security deep dive into CVE‑2026‑31944 related to LibreChat but offers no concrete exploit details, mitigation advice, or evidence of active exploitation.

ナタリー 🌙@natalie_avfiebPatch

The text describes a confusion deputy flaw in LibreChat MCP OAuth that can expose Atlassian/Outlook tokens, provides a CVSS score, and notes the vulnerability has been fixed in version 0.8.3-rc1.

CVE@CVEnewDisclosure

The post announces CVE-2026-31944, highlighting an issue with LibreChat’s OAuth callback in specific releases, but offers no exploitation or mitigation details.