CVE-2026-22252 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allow…
Critical CVSS: 9.1

CVE-2026-22252

LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.
Vendor
Librechat
Product
Librechat
CWE
CWE-285
Yayın Tarihi
2026-01-12 19:16:03
Güncelleme
2026-01-15 22:46:28
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

CWE-285 Librechat CRITICAL Librechat 2026

Referanslar

https://github.com/danny-avila/LibreChat/commit/211b39f3113d4e6ecab84be0a83f4e9c9dea127f https://github.com/danny-avila/LibreChat/security/advisories/GHSA-cxhj-j78r-p88f