CVE-2025-8850 Insecure API Design in danny-avila/librechat
Authenticated users can bypass 2FA verification to disable two-factor authentication on their own accounts due to missing backend validation.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-8850?
CVE-2025-8850 is a low-severity vulnerability in Librechat Librechat, published on 30 Oct 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly validate the OTP or backup code when the API endpoint '/api/auth/2fa/disable' is directly accessed. This flaw can be exploited by authenticated users to weaken the security of their own accounts, although it does not lead to full account compromise.
Weakness: CWE-440
Which versions are affected by CVE-2025-8850?
It affects 1 product.
Products include Librechat Librechat.
How do I fix CVE-2025-8850?
No fix has been published for CVE-2025-8850 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-8850 being exploited?
There is no known exploitation of CVE-2025-8850 in the wild and no public exploit code.
Other vulnerabilities in Librechat Librechat
- CVE-2026-32625 LibreChat Exfiltrates Server Secrets via MCP Server URL Injection
- CVE-2024-11167 Improper Access Control in danny-avila/librechat
- CVE-2026-22252 LibreChat MCP Stdio Remote Command Execution
- CVE-2025-69222 LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions
- CVE-2024-41704 Path traversal in n/a
Sources
Also known as GHSA-x5w7-gch7-xjf6.