CVE-2026-31950

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc2 through 0.8.2-rc3, the SSE streaming endpoint `/api/agents/chat/stream/:streamId` does not verify that the requesting user owns the stream. Any authenticated user who obtains or guesses a valid stream ID can subscribe and read another user's real-time chat content, including messages, AI responses, and tool invocations. Version 0.8.2 patches the issue.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-284 CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Mar 27, 2026
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-319515.7LibreChat is a ChatGPT clone with additional features. In versions 0.8.2-rc1 through 0.8.3-rc1, user-created MCP (Model Context Protocol) se CVE-2026-319528.1Xibo is an open source digital signage platform with a web content management system and Windows display player software. Versions 1.7 throu CVE-2026-319535.4Xibo is an open source digital signage platform with a web content management system and Windows display player software. A stored Cross-Sit CVE-2026-319547.3Emlog is an open source website building system. In 2.6.6 and earlier, the delete_async action (asynchronous delete) lacks a call to LoginAu CVE-2026-319554.9Xibo is an open source digital signage platform with a web content management system and Windows display player software. An authenticated S CVE-2026-319564.3Xibo is an open source digital signage platform with a web content management system and Windows display player software. Prior to version 4 CVE-2026-3195710.0Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed witho CVE-2026-319587.5Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number o CVE-2026-319595.3Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains a Server-Side Request Forg CVE-2026-31965.5An integer overflow vulnerability was found in the virtio-snd device via PCM_INFO requests from the guest. A malicious guest can provide out CVE-2026-319605.3Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 has unbounded reads of HTTP respons CVE-2026-319615.5Quill provides simple mac binary signing and notarization from any platform. Quill before version v0.7.1 contains an unbounded memory alloca