CVE-2026-54030 | danny-avila LibreChat up to 0.8.4 MCP resource origin validation (GHSA-gvpj-vm2f-2m23)

June 25, 2026 Yanac

A vulnerability marked as problematic has been reported in danny-avila LibreChat up to 0.8.4. The affected element is an unknown function of the component MCP Handler. This manipulation of the argument resource causes origin validation error.

This vulnerability is handled as CVE-2026-54030. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More