CVE-2026-44654: CWE-863: Incorrect Authorization in danny-avila LibreChat
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.
AI Analysis
Technical Summary
CVE-2026-44654 is an incorrect authorization vulnerability (CWE-863) in danny-avila's LibreChat, an enhanced ChatGPT clone supporting multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete files via the DELETE /api/files endpoint that the owner has reused across multiple agents. This deletion affects all agents referencing the file globally, not just the shared agent, resulting in broken private agents with stale file references. This violates expected access controls by allowing editing access in one agent to impact others. The issue is patched in version 0.8.4.
Potential Impact
An attacker with shared-agent editor privileges can delete files that the owner uses across multiple agents, causing the owner's private agents to break silently due to stale file references. This leads to cross-agent integrity violations and potential disruption of the owner's private agent functionality. There is no indication of privilege escalation or data disclosure beyond file deletion.
Mitigation Recommendations
Upgrade LibreChat to version 0.8.4 or later, where this authorization issue is patched. No other mitigation steps are indicated. Patch status is confirmed by the vendor's versioning information.
CVE-2026-44654: CWE-863: Incorrect Authorization in danny-avila LibreChat
Description
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete file records through `DELETE /api/files` that the owner has reused across multiple agents. The deletion removes the file globally — not just from the shared agent — breaking the owner's other private agents that reference the same `file_id`. The private agent retains a stale `file_id` reference that no longer resolves. A shared-agent editor can destroy files that the owner uses across multiple agents. The owner's private agents — which the attacker has no access to — break silently with stale `file_id` references. This is a cross-agent integrity violation: editing access to one agent should not affect another. Version 0.8.4 contains a patch.
CVSS v4.0
Score 5.7medium
Affected software
pkg:github/danny-avila/LibreChatRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-44654 is an incorrect authorization vulnerability (CWE-863) in danny-avila's LibreChat, an enhanced ChatGPT clone supporting multiple AI providers. In versions up to and including 0.8.3, a shared-agent editor can delete files via the DELETE /api/files endpoint that the owner has reused across multiple agents. This deletion affects all agents referencing the file globally, not just the shared agent, resulting in broken private agents with stale file references. This violates expected access controls by allowing editing access in one agent to impact others. The issue is patched in version 0.8.4.
Potential Impact
An attacker with shared-agent editor privileges can delete files that the owner uses across multiple agents, causing the owner's private agents to break silently due to stale file references. This leads to cross-agent integrity violations and potential disruption of the owner's private agent functionality. There is no indication of privilege escalation or data disclosure beyond file deletion.
Mitigation Recommendations
Upgrade LibreChat to version 0.8.4 or later, where this authorization issue is patched. No other mitigation steps are indicated. Patch status is confirmed by the vendor's versioning information.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-05-07T15:30:10.876Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1f64cce29bf47b5010d69c
Added to database: 06/02/2026, 23:18:36 UTC
Last enriched: 06/10/2026, 11:16:07 UTC
Last updated: 07/18/2026, 17:31:43 UTC
Views: 99
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.