Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

danny-avila/librechat

              main @ 9e74cc0
            

270

Fixes

CVEs

CRITICAL

Peak severity

18.2%

Coverage

Highlights

Auth Bypass: 120 prior fixes. Scrutinize any change in this area.

api/server/controllers/agents/v1.js: most-fixed (10 issues). Treat as high-risk during review.

163 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: OpenID Connect integration was vulnerable to full account takeover where a mutable email lookup bypassed the immutable subject 'sub' claim verification during user matching. Developers must enforce strict identity matching against the 'sub' claim rather than relying on dynamic email addresses.

SSRF: Incomplete DNS and IP validation in outgoing network requests allowed SSRF attacks against internal hosts and local services. Vulnerabilities included domain check bypasses using hex-normalized IPv4-mapped IPv6 formats, unparseable placeholder template configurations, and private IP blocks.

Path Traversal: The code-execution sandbox was prone to directory traversal and arbitrary file write vectors due to improper filename sanitization and unsafely joined paths in extraction operations. Stricter path canonicalization and deterministic, random prefixes are required for all execution-generated artifacts.