CVE-2026-4276

Summary

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

Affected Software

Weaknesses

• CWE-20 Improper Input Validation
• CWE-117 Improper Output Neutralization for Logs

ADP Enrichment

CVE Program Container

Additional References

• https://www.kb.cert.org/vuls/id/624941

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://kb.cert.org/vuls/id/624941

• ←Previous
• Next→