CVE-2026-4276
LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.
| Vendor | librechat |
| Product | rag api |
| Published | Mar 16, 2026 |
| Last Updated | Mar 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for librechat rag api
Be the first to know when new high vulnerabilities affecting librechat rag api are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
LibreChat / RAG API
0.7.0