Michael Koppmann

The IRIS web application in version 2.4.26 and possibly others does not protect its user authentication against brute-force attacks.

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the custom attributes function.

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the datastore upload function.

The IRIS web application in version 2.4.26 and possibly others is vulnerable to stored cross-site scripting (XSS) in the assets function.

**Name of the Vulnerable Software and Affected Versions** IRIS web application version 2.4.26 **Description** The logout functionality is ineffective, allowing stolen session cookies to be misused for an extended period. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The IRIS web application in version 2.4.26 and possibly others does not protect its MFA validation against brute-force attacks.

**Name of the Vulnerable Software and Affected Versions** LibreChat version 0.8.1-rc2 **Description** A logged-in user can obtain a JWT (JSON Web Token) for both the LibreChat API and the RAG API. This allows access to both APIs with the user's credentials. The JWT token can be abused. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** LibreChat version 0.8.1-rc2 **Description** LibreChat version 0.8.1-rc2 utilizes the same JWT secret for both the user session mechanism and the RAG API, which compromises the service-level authentication of the RAG API. This shared secret creates a security issue where authentication for the RAG API is vulnerable due to the reuse of the JWT secret. The RAG API is an endpoint used for Retrieval-Augmented Generation, a technique used to enhance the capabilities of large language models. JWT (JSON Web Token) is a standard for securely transmitting information between parties as a JSON object. **Recommendations** Update to a newer version that contains a fix for this vulnerability.