VDB
CVE-2026-22252
CVE-2026-22252
PUBLISHED
CVSS 9.100000381469727 CRITICAL
LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.
EPSS 4.22% · 90.9th percentile
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
EPSS Score
4.22%
90.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| danny-avila | LibreChat | < v0.8.2-rc2, < v0.8.2-rc2 |
| librechat | librechat | 0.8.2, 0.8.2 |
Timeline
- Jan 12, 2026 CVE Published
- Jan 12, 2026 PoC Published
- Jan 12, 2026 PoC Published
- Jan 12, 2026 PoC Published
- Jan 12, 2026 PoC Published
- Jan 13, 2026 EPSS Score
- Jan 16, 2026 EPSS Score
- Jan 20, 2026 EPSS Score
- Jan 23, 2026 EPSS Score
- Jan 26, 2026 EPSS Score
- Jan 30, 2026 EPSS Score
- Feb 2, 2026 EPSS Score