CVE-2026-22252

Critical

Published: 12/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

LibreChat prior to v0.8.2-rc2 has a vulnerability in the MCP stdio transport that accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.

Risk Assessment

An authenticated user can gain full control over the container, potentially leading to privilege escalation and system integrity compromise.

Recommendation

Upgrade LibreChat to v0.8.2-rc2 or later, which contains the fix.

Original NVD description (English source)

LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.