{"data":{"id":"ea6de2ec-dcd5-4e78-bfa1-06a4744346cb","title":"CVE-2026-31944: LibreChat is a ChatGPT clone with additional features. From 0.8.2 to 0.8.2-rc3, The MCP (Model Context Protocol) OAuth…","summary":"LibreChat versions 0.8.2 through 0.8.2-rc3 have a flaw in the MCP (Model Context Protocol) OAuth callback endpoint. It stores OAuth tokens for the user who started the flow without checking that the browser completing the redirect is logged in or belongs to that same user. An attacker can send a victim the authorization URL, and the victim's tokens for linked services such as Atlassian and Outlook end up on the attacker's account, enabling account takeover.","solution":"Fixed in 0.8.3-rc1.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-31944","publishedAt":"2026-03-13T19:54:39.590Z","cveId":"CVE-2026-31944","cweIds":["CWE-306"],"cvssScore":"7.6","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LibreChat","MCP (Model Context Protocol)","Atlassian","Outlook"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LibreChat MCP OAuth callback stores tokens for the wrong user","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.0026,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T18:11:01.326Z","patchAvailable":null,"disclosureDate":"2026-03-13T19:54:39.590Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-115"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":null,"fixes":[]}}