CVE-2026-32625 - Vulnerability Details

Related Threat Clusters

• Critical Vulnerability CVE-2026-32625 Discovered in LibreChat

  CVE-2026-32625 is a critical information disclosure vulnerability affecting LibreChat versions up to 0.8.3. The flaw allows authenticated users to exploit the Model Context Protocol (MCP) server integration by crafting…

  2 articles · Updated June 3, 2026
• Critical Vulnerabilities CVE-2026-48866 and CVE-2026-7313 Disclosed

  Two critical vulnerabilities, CVE-2026-48866 and CVE-2026-7313, were disclosed recently. CVE-2026-48866, published on June 1, 2026, has a CVSS score of 9.60, indicating a critical threat with high impacts on…

  7 articles · Updated June 3, 2026

Recent Intelligence Reports

• CVE-2026-32625 INCIBE-CERT - Vulnerabilities RSS / 7h Gravedad 3.1 (CVSS 3.1 Base Score) Gravedad 3.1 Txt Gravedad 3.1 (CVSS 3.1 Base Score) — www.incibe.es · June 3, 2026
• CVE-2026-32625 Valters IT Hub / 2h The flaw resides in the Model Context Protocol (MCP) server integration, where the application resolves environment variable placeholders against the server's during Zod schema validation of user-supplied MCP server URLs. An authenticated attacker can craft a malicious MCP server configuration with a URL containing environment variable references (e.g., ). When the server validates this URL, it substitutes the placeholder with the actual environment variable va — www.valtersit.com · June 3, 2026
• CVE-2026-32625 - Exploits & Severity — Feedly · June 3, 2026

Related Entities