CVE-2025-8850
CVE-2025-8850 is a high-severity vulnerability in Librechat with a CVSS 3.x base score of 8.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-440.
Key facts
- Severity: High (CVSS 3.x base score 8.8)
- EPSS exploit prediction: 0% (34th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-37197
- Weakness: CWE-440
- Affected product: Librechat
- Published:
- Last modified:
Description
In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly validate the OTP or backup code when the API endpoint '/api/auth/2fa/disable' is directly accessed. This flaw can be exploited by authenticated users to weaken the security of their own accounts, although it does not lead to full account compromise.
Frequently asked questions
- What is CVE-2025-8850?
- In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly validate the OTP or backup code when the API endpoint '/api/auth/2fa/disable' is directly accessed. This flaw can be exploited by authenticated users to weaken the security of their own accounts, although it does not lead to full account compromise.
- How severe is CVE-2025-8850?
- CVE-2025-8850 has a CVSS 3.x base score of 8.8, rated high severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2025-8850 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-8850?
- CVE-2025-8850 affects Librechat. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2025-8850?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- Does CVE-2025-8850 have an EU (EUVD) identifier?
- Yes. CVE-2025-8850 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-37197.
- When was CVE-2025-8850 published?
- CVE-2025-8850 was published on 2025-10-30 and last updated on 2026-06-17.
References
- https://github.com/danny-avila/librechat/commit/7e4c8a5d0d2dbe5bf8fd272ff6acafb27d24744f
- https://huntr.com/bounties/8e615709-f4de-41e2-b194-f0d91ed7c75e
Affected products (1)
- cpe:2.3:a:librechat:librechat:0.7.9:-:*:*:*:*:*:*
More vulnerabilities in Librechat
- CVE-2024-41704 — Critical (CVSS 9.8): LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images.
- CVE-2024-41703 — Critical (CVSS 9.8): LibreChat through 0.7.4-rc1 has incorrect access control for message updates.
- CVE-2026-32625 — Critical (CVSS 9.6): LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, the…
- CVE-2026-22252 — Critical (CVSS 9.1): LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts…
- CVE-2025-69222 — Critical (CVSS 9.1): LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery…
- CVE-2024-10361 — Critical (CVSS 9.1): An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the…
All CVEs affecting Librechat →
Other CWE-440 vulnerabilities
- CVE-2019-6569 — Critical (CVSS 9.1): The monitor barrier of the affected products insufficiently blocks data from being forwarded over the mirror port into…
- CVE-2024-32971 — Critical (CVSS 9.0): Apollo Router is a configurable, graph router written in Rust to run a federated supergraph that uses Apollo Federation…
- CVE-2026-8806 — High (CVSS 8.7): Expected Behavior Violation vulnerability in Mitsubishi Electric MELSEC iQ-F Series FX5-ENET/IP Ethernet Module…
- CVE-2018-12550 — High (CVSS 8.1): When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty,…
- CVE-2023-4807 — High (CVSS 7.8): Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the…
- CVE-2024-30246 — High (CVSS 7.6): Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could…