CVE-2026-4276 - Vulnerability Details - OpenCVE

LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Librechat	Rag Api

No data.

No data.

References

Link	Providers
https://www.spirityenterprise.com/pentest
https://kb.cert.org/vuls/id/624941
https://www.kb.cert.org/vuls/id/624941

History

Tue, 17 Mar 2026 18:15:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Tue, 17 Mar 2026 10:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Librechat Librechat rag Api
Vendors & Products		Librechat Librechat rag Api

Mon, 16 Mar 2026 17:30:00 +0000

Type	Values Removed	Values Added
References		https://www.kb.cert.org/vuls/id/624941

Mon, 16 Mar 2026 15:45:00 +0000

Type	Values Removed	Values Added
Description		LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.
Title		LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.
References		https://kb.cert.org/vuls/id/624941

MITRE

Status: PUBLISHED

Assigner: certcc

Published: 2026-03-16T15:31:35.542Z

Updated: 2026-03-17T17:15:16.494Z

Reserved: 2026-03-16T15:25:58.025Z

Link: CVE-2026-4276

Vulnrichment

Updated: 2026-03-16T16:22:47.436Z

NVD

Status : Awaiting Analysis

Published: 2026-03-16T16:16:18.723

Modified: 2026-03-17T18:16:17.670

Link: CVE-2026-4276

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-4276", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-03-16T15:25:58.025Z", "datePublished": "2026-03-16T15:31:35.542Z", "dateUpdated": "2026-03-17T17:15:16.494Z"}, "containers": {"cna": {"title": "LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.", "descriptions": [{"lang": "en", "value": "LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "LibreChat", "product": "RAG API", "versions": [{"status": "affected", "version": "0.7.0"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20 Improper Input Validation"}]}, {"descriptions": [{"lang": "en", "description": "CWE-117 Improper Output Neutralization for Logs"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/624941"}], "x_generator": {"engine": "VINCE 3.0.32", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-4276"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-03-16T15:31:35.542Z"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/624941"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-16T16:22:47.436Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-03-17T17:14:14.174075Z", "id": "CVE-2026-4276", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-17T17:15:16.494Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/624941"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-03-16T16:22:47.436Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-4276", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-17T17:14:14.174075Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-17T17:14:58.035Z"}}], "cna": {"title": "LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "LibreChat", "product": "RAG API", "versions": [{"status": "affected", "version": "0.7.0"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/624941"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.32", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-4276"}, "descriptions": [{"lang": "en", "value": "LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20 Improper Input Validation"}]}, {"descriptions": [{"lang": "en", "description": "CWE-117 Improper Output Neutralization for Logs"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-03-16T15:31:35.542Z"}}}, "cveMetadata": {"cveId": "CVE-2026-4276", "state": "PUBLISHED", "dateUpdated": "2026-03-17T17:15:16.494Z", "dateReserved": "2026-03-16T15:25:58.025Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-03-16T15:31:35.542Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}