Librechat

Librechat is an open-source conversational AI platform that aggregates and manages access to multiple large language model endpoints, presenting a focused but security-critical application whose role in handling user authentication and API proxying creates substantial leverage for privilege-escalation attacks. Vulnerabilities affecting the vendor skew toward serious outcomes, with an elevated share reaching critical severity, reflecting the high stakes of authentication and authorization flaws in a system that mediates user access to sensitive model APIs and data. The vulnerability pattern is remarkably durable: recurring weakness classes center on improper access control, authorization bypass through user-controlled keys, missing authorization checks, and server-side request forgery, all of which exploit the application's position as an intermediary between users and protected backend services. These flaws are characteristic of auth-layer and API-proxy codebases and amplify risk because a single bypass can grant unauthorized access to model usage, user conversations, or internal systems. Defenders should treat Librechat deployments as high-value targets for privilege-escalation attempts and prioritize prompt patching of authorization-related disclosures; current severity and exploitation counts are shown alongside this summary.