# cve.now: Danny-avila

The newest entries naming Danny-avila as an affected vendor (up to 200), of 48 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-54024](https://cve.now/CVE-2026-54024.md): LibreChat: Incomplete Fix for CVE-2024-11171 — Conversation Import Multer Instance Missing File Size Limits (CVSS 6.5)
- [CVE-2026-54025](https://cve.now/CVE-2026-54025.md): LibreChat: Stored XSS via unescaped image alt text in markdown artifact preview (CVSS 5.4)
- [CVE-2026-54027](https://cve.now/CVE-2026-54027.md): LibreChat: Image Upload Route Bypasses Agent Permission Check — Incomplete Fix for File Upload Authorization (CVSS 6.5)
- [CVE-2026-54029](https://cve.now/CVE-2026-54029.md): LibreChat: IDOR in Message Deletion — Incomplete Fix for CVE-2024-41703 Leaves deleteMessages() Without User Filter (CVSS 5.3)
- [CVE-2026-54033](https://cve.now/CVE-2026-54033.md): LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs (CVSS 7.7)
- [CVE-2026-54037](https://cve.now/CVE-2026-54037.md): LibreChat: Incomplete Fix for CVE-2025-7105 — /api/convos/duplicate Lacks Rate Limiting Applied to /api/convos/fork (CVSS 6.5)
- [CVE-2026-54030](https://cve.now/CVE-2026-54030.md): LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow (CVSS 8.0)
- [CVE-2026-54040](https://cve.now/CVE-2026-54040.md): LibreChat: 2FA Backup Code Regeneration Without OTP Verification Allows 2FA Bypass (CVSS 5.9)
- [CVE-2026-54036](https://cve.now/CVE-2026-54036.md): LibreChat: 2FA Re-enrollment Allows Full Account 2FA Takeover Without OTP Verification (CVSS 5.3)
- [CVE-2026-44654](https://cve.now/CVE-2026-44654.md): LibreChat: Shared-agent editor can globally delete owner's file records — breaks owner's other private agents (CVSS 5.7)
- [CVE-2026-44653](https://cve.now/CVE-2026-44653.md): LibreChat Shared MCP Server View Leaks Decrypted Admin Secrets (CVSS 6.5)
- [CVE-2026-32625](https://cve.now/CVE-2026-32625.md): LibreChat Exfiltrates Server Secrets via MCP Server URL Injection (CVSS 9.6)
- [CVE-2026-31942](https://cve.now/CVE-2026-31942.md): LibreChat has IDOR in API Keys Management that allows any authenticated user to overwrite other users' API keys (CVSS 7.1)
- [CVE-2026-34371](https://cve.now/CVE-2026-34371.md): LibreChat Affected by Arbitrary File Write via \`execute\_code\` Artifact Filename Traversal (CVSS 6.3)
- [CVE-2026-31951](https://cve.now/CVE-2026-31951.md): LibreChat's MCP Server Header Injection Enables OAuth Token Theft (CVSS 6.8)
- [CVE-2026-31950](https://cve.now/CVE-2026-31950.md): LibreChat's IDOR in SSE Stream Subscription Allows Reading Other Users' Chats (CVSS 5.3)
- [CVE-2026-31945](https://cve.now/CVE-2026-31945.md): LibreChat Server-Side Request Forgery using DNS resolution (CVSS 7.7)
- [CVE-2026-31943](https://cve.now/CVE-2026-31943.md): LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP (CVSS 8.5)
- [CVE-2025-41258](https://cve.now/CVE-2025-41258.md): LibreChat RAG API Authentication Bypass (CVSS 8.0)
- [CVE-2026-31949](https://cve.now/CVE-2026-31949.md): LibreChat Denial of Service (DoS) via Unhandled Exception in DELETE /api/convos (CVSS 6.5)
- [CVE-2026-31944](https://cve.now/CVE-2026-31944.md): LibreChat MCP OAuth callback does not validate browser session — allows token theft via redirect link (CVSS 7.6)
- [CVE-2025-7105](https://cve.now/CVE-2025-7105.md): Denial of Service via JavaScript Memory Overflow in danny-avila/librechat (CVSS 5.7)
- [CVE-2026-22252](https://cve.now/CVE-2026-22252.md): LibreChat MCP Stdio Remote Command Execution (CVSS 9.1)
- [CVE-2025-69222](https://cve.now/CVE-2025-69222.md): LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions (CVSS 9.1)
- [CVE-2025-69221](https://cve.now/CVE-2025-69221.md): LibreChat has Insufficient Access Control for Agent Permission Queries (CVSS 4.3)
- [CVE-2025-69220](https://cve.now/CVE-2025-69220.md): LibreChat has Insufficient Access Control for Agent Files (CVSS 7.1)
- [CVE-2025-66452](https://cve.now/CVE-2025-66452.md): LibreChat's lack of JSON parsing error handling can lead to XSS (CVSS 5.3)
- [CVE-2025-66451](https://cve.now/CVE-2025-66451.md): LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes (CVSS 5.3)
- [CVE-2025-66450](https://cve.now/CVE-2025-66450.md): LibreChat JSON Injection in Chat POST Allows Remote Resource Inclusion and PXSS via Image Upload (CVSS 8.6)
- [CVE-2025-66201](https://cve.now/CVE-2025-66201.md): LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability (CVSS 8.6)
- [CVE-2025-8849](https://cve.now/CVE-2025-8849.md): Denial of Service in danny-avila/librechat (CVSS 5.4)
- [CVE-2025-8850](https://cve.now/CVE-2025-8850.md): Insecure API Design in danny-avila/librechat (CVSS 3.1)
- [CVE-2025-8848](https://cve.now/CVE-2025-8848.md): HTML Injection in Accept-Language Header in danny-avila/librechat (CVSS 4.8)
- [CVE-2025-7104](https://cve.now/CVE-2025-7104.md): Mass Assignment in danny-avila/librechat (CVSS 4.3)
- [CVE-2025-7106](https://cve.now/CVE-2025-7106.md): Authorization Bypass due to Incorrect Access Control in danny-avila/librechat (CVSS 5.3)
- [CVE-2025-6088](https://cve.now/CVE-2025-6088.md): Improper Authorization in danny-avila/librechat (CVSS 4.2)
- [CVE-2025-54868](https://cve.now/CVE-2025-54868.md): LibreChat exposes arbitrary chats through Meilisearch engine (CVSS 7.5)
- [CVE-2024-10359](https://cve.now/CVE-2024-10359.md): Mass Assignment in Preset Creation Allows User ID Manipulation in danny-avila/librechat (CVSS 4.6)
- [CVE-2024-11173](https://cve.now/CVE-2024-11173.md): Unhandled Exception in danny-avila/librechat (CVSS 6.5)
- [CVE-2024-10363](https://cve.now/CVE-2024-10363.md): Improper Access Control in danny-avila/LibreChat (CVSS 5.4)
- [CVE-2024-11171](https://cve.now/CVE-2024-11171.md): Improper Input Validation in danny-avila/librechat (CVSS 7.5)
- [CVE-2024-11172](https://cve.now/CVE-2024-11172.md): Denial of Service in danny-avila/librechat (CVSS 7.5)
- [CVE-2024-11169](https://cve.now/CVE-2024-11169.md): Unhandled Exception Leading to Server Crash in danny-avila/librechat (CVSS 7.5)
- [CVE-2024-11167](https://cve.now/CVE-2024-11167.md): Improper Access Control in danny-avila/librechat (CVSS 9.4)
- [CVE-2024-10366](https://cve.now/CVE-2024-10366.md): IDOR in delete attachments in danny-avila/librechat (CVSS 7.6)
- [CVE-2024-12580](https://cve.now/CVE-2024-12580.md): Logs Debug Injection in danny-avila/librechat (CVSS 4.3)
- [CVE-2024-10361](https://cve.now/CVE-2024-10361.md): Arbitrary File Deletion via Path Traversal in danny-avila/librechat (CVSS 8.1)
- [CVE-2024-11170](https://cve.now/CVE-2024-11170.md): Path Traversal in danny-avila/librechat (CVSS 8.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/danny-avila
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.