CVE-2025-8848

MEDIUM NUCLEI

librechat 0.7.9 - HTML Injection via Accept-Language Header

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2025-8848 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Description

A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When a logged-in user sends an HTTP GET request with a crafted Accept-Language header, arbitrary HTML can be injected into the <html lang=""> tag of the response. This can lead to potential security risks such as cross-site scripting (XSS) attacks.

Nuclei Templates (1)

LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header
MEDIUMVERIFIEDby Kazgangap
FOFA: app="LibreChat"

References (1)

Core 1
Core References

Scores

CVSS v3 5.4
EPSS 0.0001
EPSS Percentile 3.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-94 CWE-79
Status published
Products (1)
librechat/librechat 0.7.9
Published Oct 22, 2025
Tracked Since Feb 18, 2026