Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-03 | 1 | Disclosure1 |
| 2026-07-23 | 1 | Patch1 |
🚨 HIGH: CVE-2026-44654 (CVSS 8.1) affects LibreChat ≤0.8.3. Shared-agent editors can delete file records globally, breaking owner's private agents. Patch available in v0.8.4. #CVE #PatchNow #ThreatIntel https://t.co/TujKVdF1fO
Post summary
The tweet announces that CVE‑2026‑44654 impacts LibreChat <=0.8.3 and notes that upgrading to v0.8.4 patches the issue.
CVE-2026-44654 LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records throu… https://www.cve.org/CVERecord?id=CVE-2026-44654
Post summary
The post announces CVE‑2026‑44654, describing a flaw in LibreChat up to version 0.8.3 that allows a shared‑agent editor to delete file records; it gives a technical detail but offers no PoC, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | librechat | librechat | - | - | - |