Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

danny-avila/LibreChat

              main @ 773127b
            

330

Fixes

CVEs

CRITICAL

Peak severity

27.0%

Coverage

Highlights

Auth Bypass: 93 prior fixes. Scrutinize any change in this area.

api/server/controllers/agents/v1.js: most-fixed (10 issues). Treat as high-risk during review.

244 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass / Privilege Escalation: Recurring authorization bypasses across agent, HITL, and admin OAuth paths, often via missing permission gates or client-supplied context that is not validated against server state.

SSRF: SSRF protections repeatedly fail on IPv6 variants, redirects, DNS rebinding, and user-controlled URLs; guards must be applied at connect time across all outbound paths.

Tenant Isolation Bypass / Cache Poisoning: Tenant context is frequently lost in cache keys and query operations, leading to cross-tenant data leakage and authorization bypass; scoping must be enforced on every cache and DB operation.