Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H N N 6.5 .0028 20.0 —
AFFECTED Product Versions Fixed LibreChat < 0.8.4 – —
TIMELINE May 7 Reserved by GitHub_M Jun 2 EXPLOIT PUBLISHED — CVE-2026-44653 (danny-avila LibreChat). Public exploit reference added. Jun 2 Published (CNA: GitHub_M)
LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. In versions up to and including 0.8.3, users with only `VIEW` access to an MCP server can retrieve the server's decrypted admin-managed secrets through `GET /api/mcp/servers` and `GET /api/mcp/servers/:serverName`. The returned config includes plaintext values for `apiKey.key` and `oauth.client_secret`. This allows viewers of a shared MCP server to exfiltrate the underlying provider credentials. Version 0.8..4 contains a patch. Other remediations include: never returning decrypted admin-managed secrets to non-owners; redacting apiKey.key and oauth.client_secret from all API responses consider returning only boolean presence indicators for secrets, similar to the auth-values route pattern; and, if owners need to edit configs without re-entering secrets, preserving secrets server-side and returning placeholders instead of plaintext.
| Date | Event | Detail |
|---|---|---|
| May 7, 2026 | Reserved | Reserved by GitHub_M |
| June 2, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-44653 (danny-avila LibreChat). Public exploit reference added. |
| June 2, 2026 | Published | Published (CNA: GitHub_M) |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| danny-avila | LibreChat | — | < 0.8.4 | — |
Authoritative record: CVE-2026-44653 at cve.org
Vendors: danny-avila
Weaknesses: CWE-201
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-44653 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.