CVE-2026-54037

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to POST /api/convos/fork to prevent rapid-fire conversation duplication. However, the POST /api/convos/duplicate endpoint — which is in the same file and performs the exact same expensive database operations — was not given any rate limiter. An authenticated user can bypass the CVE-2025-7105 fix by using /duplicate instead of /fork to exhaust server resources. This vulnerability is fixed in 0.8.4-rc1.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/danny-avila/LibreChat/security/advisories/GHSA-g445-9wq6-jf3v	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:*

History

25 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) LibreChat es un clon mejorado de ChatGPT que soporta múltiples proveedores de IA. Antes de la versión 0.8.4-rc1, la corrección para CVE-2025-7105 añadió los limitadores de tasa forkIpLimiter y forkUserLimiter a POST /API/convos/fork para prevenir la duplicación rápida de conversaciones. Sin embargo, el endpoint POST /API/convos/duplicate - que está en el mismo archivo y realiza exactamente las mismas operaciones costosas de base de datos - no se le aplicó ningún limitador de tasa. Un usuario autenticado puede eludir la corrección de CVE-2025-7105 usando /duplicate en lugar de /fork para agotar los recursos del servidor. Esta vulnerabilidad está corregida en la versión 0.8.4-rc1.

Information

Published : 2026-06-25 17:16

Updated : 2026-10-25 22:10

NVD link : CVE-2026-54037

Mitre link : CVE-2026-54037

CVE.ORG link : CVE-2026-54037

JSON object : View

Products Affected

librechat

librechat

CWE

CWE-770

Allocation of Resources Without Limits or Throttling

{"id": "CVE-2026-54037", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-54037", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-25T18:18:00.563402Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "danny-avila", "product": "LibreChat", "versions": [{"status": "affected", "version": "< 0.8.4-rc1"}]}]}], "published": "2026-06-25T17:16:41.000", "references": [{"url": "https://github.com/danny-avila/LibreChat/security/advisories/GHSA-g445-9wq6-jf3v", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-770"}]}], "descriptions": [{"lang": "en", "value": "LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to POST /api/convos/fork to prevent rapid-fire conversation duplication. However, the POST /api/convos/duplicate endpoint \u2014 which is in the same file and performs the exact same expensive database operations \u2014 was not given any rate limiter. An authenticated user can bypass the CVE-2025-7105 fix by using /duplicate instead of /fork to exhaust server resources. This vulnerability is fixed in 0.8.4-rc1."}, {"lang": "es", "value": "LibreChat es un clon mejorado de ChatGPT que soporta m\u00faltiples proveedores de IA. Antes de la versi\u00f3n 0.8.4-rc1, la correcci\u00f3n para CVE-2025-7105 a\u00f1adi\u00f3 los limitadores de tasa forkIpLimiter y forkUserLimiter a POST /API/convos/fork para prevenir la duplicaci\u00f3n r\u00e1pida de conversaciones. Sin embargo, el endpoint POST /API/convos/duplicate - que est\u00e1 en el mismo archivo y realiza exactamente las mismas operaciones costosas de base de datos - no se le aplic\u00f3 ning\u00fan limitador de tasa. Un usuario autenticado puede eludir la correcci\u00f3n de CVE-2025-7105 usando /duplicate en lugar de /fork para agotar los recursos del servidor. Esta vulnerabilidad est\u00e1 corregida en la versi\u00f3n 0.8.4-rc1."}], "lastModified": "2026-10-25T22:10:00.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77B80F25-E7C2-442E-98E3-F4462C40C74F", "versionEndIncluding": "0.8.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}