CVE-2026-31944 | danny-avila LibreChat up to 0.8.2-rc3 Model Context Protocol OAuth Callback Endpoint missing authentication (GHSA-vf7j-7mrx-hp7g)

A vulnerability classified as critical was found in danny-avila LibreChat up to 0.8.2-rc3. This issue affects some unknown processing of the component Model Context Protocol OAuth Callback Endpoint. The manipulation results in missing authentication.

This vulnerability is identified as CVE-2026-31944. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.