CVE-2026-22252: LibreChat MCP Stdio Remote Command Execution

Q: What is the severity of CVE-2026-22252?

CVE-2026-22252 is considered a critical vulnerability due to its potential for remote command execution as root.

Q: How do I fix CVE-2026-22252?

To fix CVE-2026-22252, upgrade LibreChat to version 0.8.2-rc2 or later, which includes the necessary security patches.

Q: Who is affected by CVE-2026-22252?

Any user running LibreChat versions prior to 0.8.2-rc2 is at risk of CVE-2026-22252.

Q: What type of vulnerability is CVE-2026-22252?

CVE-2026-22252 is a remote command execution vulnerability affecting LibreChat.

Q: Can unauthenticated users exploit CVE-2026-22252?

No, only authenticated users can exploit CVE-2026-22252 to execute arbitrary commands.

Published Jan 12, 2026

Updated

LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2.

Affected Software

2 affected components

librechat librechat<0.8.2-rc2

librechat librechat=0.8.2-rc1

Remediation

Patch Available

https://github.com/danny-avila/LibreChat/commit/211b39f3113d4e6ecab84be0a83f4e9c9dea127f

Event History

Jan 12, 2026

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Oct 20, 58013

Event

via FIRST·10:35 AM

Frequently Asked Questions

What is the severity of CVE-2026-22252?

CVE-2026-22252 is considered a critical vulnerability due to its potential for remote command execution as root.

How do I fix CVE-2026-22252?

To fix CVE-2026-22252, upgrade LibreChat to version 0.8.2-rc2 or later, which includes the necessary security patches.

Who is affected by CVE-2026-22252?