CVE-2026-22252 - LibreChat MCP Stdio Remote Command Execution - Full Analysis

CVE ID : CVE-2026-22252 Published : Jan. 12, 2026, 6:01 p.m. | 41 minutes ago Description : LibreChat is a ChatGPT clone with additional features. Prior to v0.8.2-rc2, LibreChat's MCP stdio transport accepts arbitrary commands without validation, allowing any authenticated user to execute shell commands as root inside the container through a single API request. This vulnerability is fixed in v0.8.2-rc2. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor