PatchTheCVElibrechat vulnerabilities and fixes
Recent CVEs affecting librechat, with upgrade or downgrade steps. 9 tracked.
librechat has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2026-06-25. Highest priority: CVE-2026-54033 (score 39/100).
- CVE-2026-54033 HIGH 7.7 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54037 MEDIUM 6.5 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54024 MEDIUM 6.5 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54027 MEDIUM 6.5 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54030 HIGH 8.0 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54036 MEDIUM 5.3 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54040 MEDIUM 5.9 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54025 MEDIUM 5.4 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
- CVE-2026-54029 MEDIUM 5.3 UPGRADE LibreChat is an enhanced ChatGPT clone that supports multiple AI providers
FAQ
How do I fix librechat vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is librechat being exploited right now?
None of the tracked librechat CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which librechat CVE should I patch first?
CVE-2026-54033 currently ranks highest (39/100): LibreChat is an enhanced ChatGPT clone that supports multiple AI providers.