Beveiligingsadvies

CVE-2026-22252

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-01-12 18:01:48

Laatst bijgewerkt 2026-01-12 18:48:33

Toegewezen door GitHub_M

CVSS-score 9.1

Status PUBLISHED

Beschrijving

LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.

← Alle CVE's bekijken Bekijk op cve.org ↗