CVE-2026-31945

{"id": "CVE-2026-31945", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-31945", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-30T19:00:49.640233Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "danny-avila", "product": "LibreChat", "versions": [{"status": "affected", "version": ">= 0.8.2-rc2, < 0.8.3-rc1"}]}]}], "published": "2026-03-27T20:16:30.060", "references": [{"url": "https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/danny-avila/LibreChat/security/advisories/GHSA-f92m-jpv7-55p2", "tags": ["Exploit", "Mitigation", "Vendor Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-918"}]}], "descriptions": [{"lang": "en", "value": "LibreChat is a ChatGPT clone with additional features. Versions 0.8.2-rc2 through 0.8.2 are vulnerable to a server-side request forgery (SSRF) attack when using agent actions or MCP. Although a previous SSRF vulnerability (https://github.com/danny-avila/LibreChat/security/advisories/GHSA-rgjq-4q58-m3q8) was reported and patched, the fix only introduced hostname validation. It does not verify whether DNS resolution results in a private IP address. As a result, an attacker can still bypass the protection and gain access to internal resources, such as an internal RAG API or cloud instance metadata endpoints. Version 0.8.3-rc1 contains a patch."}, {"lang": "es", "value": "LibreChat es un clon de ChatGPT con caracter\u00edsticas adicionales. Las versiones 0.8.2-rc2 a 0.8.2 son vulnerables a un ataque de falsificaci\u00f3n de petici\u00f3n del lado del servidor (SSRF) al usar acciones de agente o MCP. Aunque una vulnerabilidad SSRF anterior (https://github.com/danny-avila/LibreChat/security/advisories/GHSA-rgjq-4q58-m3q8) fue reportada y parcheada, la soluci\u00f3n solo introdujo la validaci\u00f3n del nombre de host. No verifica si la resoluci\u00f3n DNS resulta en una direcci\u00f3n IP privada. Como resultado, un atacante a\u00fan puede eludir la protecci\u00f3n y obtener acceso a recursos internos, como una API RAG interna o puntos finales de metadatos de instancias en la nube. La versi\u00f3n 0.8.3-rc1 contiene un parche."}], "lastModified": "2026-10-26T21:10:00.170", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:librechat:librechat:0.8.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D828ED6-3F44-4DD1-B29F-62D8977AF33A"}, {"criteria": "cpe:2.3:a:librechat:librechat:0.8.2:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "21865C8B-C628-4275-A552-89F64EF22918"}, {"criteria": "cpe:2.3:a:librechat:librechat:0.8.2:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47A1B487-1A7B-4E06-8503-56E7D349FAA2"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}