LibreChat's first registered account can become the admin boundary
LibreChat's first registered account can become the admin boundary
LibreChat is a multi-user chat interface with email, OAuth and LDAP login support, roles, groups, shared resources and an optional admin panel. Its Docker documentation states that in an unscoped single-tenant deployment the first account registered becomes the administrator. The admin panel is a separate service that reuses LibreChat authentication and checks admin authority on every request.
On 2026-11-05, a count-only ZoomEye query with sub_type=all, page 1 and page size 1 returned 12,429 matches for app="LibreChat". The title query returned 13,430. Those counts identify application surfaces, not deployments with open registration or an unclaimed first-admin slot.
The first-user rule changes the deployment sequence. If registration is enabled on a public instance before the owner creates an account, an unexpected visitor may become the first user and receive the administrator role. The documentation says tenant-scoped deployments must provision administrators through a trusted flow rather than relying on first-user promotion. A self-hosted administrator should understand which mode applies before exposing the hostname.
Claim the identity plane first
Create the initial administrator from a controlled network, then decide whether public registration should remain enabled. If the instance is intended for a fixed team, use SSO and pre-provision or invite users. Review ALLOW_REGISTRATION, social registration and password reset settings together. An SSO-only deployment with a public local login path can bypass the intended identity provider.
The admin panel needs its own network and session controls. It manages users, groups, roles, permissions and live configuration. Its documentation says it stores no data of its own; changes go through LibreChat's admin API and database. That makes the admin session powerful, but also means a service-account or API token from the panel deserves the same protection as an administrator login.
Check role overrides and group membership when investigating data exposure. A user may be able to share an agent, prompt, MCP server or conversation under a permission that was enabled for a broad group. Shared links add another external path. Review the permissions matrix rather than checking only the login role name.
Use HTTPS, secure cookies and a trusted proxy configuration. Restrict the admin panel to the administrative network even if the user-facing chat is public. Log admin sign-ins, configuration changes, role grants and shared-link creation. Rotate the session secret if it was exposed, and review existing sessions after any administrator role change.
The ZoomEye result is a discovery lead. It does not prove that a first admin is unclaimed. Verify the deployment configuration, registration state and admin panel exposure on assets you own. If an unexpected admin account exists, preserve its authentication, role and audit records, disable it, and review all configuration changes made during its session.
References
- LibreChat Docker deployment, first admin account
- LibreChat Admin Panel documentation
- LibreChat access control
- ZoomEye app="LibreChat" observation
LibreChat: Enhanced ChatGPT Clone with Agents, MCP, Skills, Code Interpreter and AI model switching (46k stars)
What it does
All text below is quoted directly from the project README.
>Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, DALL-E, and more.
Features:
- UI & Experience inspired by ChatGPT with enhanced design and features
- AI Model Selection: Anthropic (Claude), AWS Bedrock, OpenAI, Azure OpenAI, Google, Vertex AI, OpenAI Responses API (incl. Azure)
- Code Interpreter API: Secure, Sandboxed Execution in Python, Node.js (JS/TS), Go, C/C++, Java, PHP, Rust, and Fortran
- Agents & Tools Integration: No-Code Custom Assistants: Build specialized, AI-driven helpers
- Web Search: Search the internet and retrieve relevant information to enhance your AI context
- Generative UI with Code Artifacts: Code Artifacts create React, HTML, and Mermaid content directly in chat
- Resumable Streams: Never lose a response: AI responses automatically reconnect and resume if your connection drops
- Speech & Audio: Chat hands-free with Speech-to-Text and Text-to-Speech
>Bundled with the Docker Compose stacks for one-command setup
Repository
LibreChat-AI/LibreChat
Repository stats
|Metric|Value|
|:-|:-|
|Stars|45,960|
|Forks|9,453|
|Last release|None|
|Languages|TypeScript 84.8%, JavaScript 14.7%, CSS 0.2%|
|Contributors|474|
|AI contributor accounts (Claude / Codex / Cursor / Copilot)|Copilot: 18, claude: 64|
|AI co-authored commits|Claude: 75, Cursor: 3, Copilot: 25|
Main contributor
|Field|Value|
|:-|:-|
|Name|Danny Avila|
|GitHub|@danny-avila|
|Commits to this repo|3,996 (top contributor)|
|X / Twitter|@lgtm_hbu|
|Followers|1350|
|Public repos|38|
|On GitHub since|2022-08-01|
──────────────────────────────
📌 How many great GitHub repos have you discovered and completely forgotten about?
Don't let another useful tool disappear into your Reddit feed. Get the community's best repos, organized by category, plus key takeaways from real developer discussions, delivered to your inbox twice a week.
📬 Never lose track of great repos again. Subscribe free.
83 points
LibreChat: свой ChatGPT со всеми моделями #shorts
LibreChat: свой ChatGPT со всеми моделями
Один self-hosted интерфейс вместо пяти подписок: OpenAI, Anthropic, Gemini, DeepSeek, Groq, Mistral, OpenRouter и Vertex AI в одном окне. Меняешь модель прямо в чате, платишь только за токены.
⚡ Главные фичи:
• Агенты, MCP, Skills, Code Interpreter и DALL-E-3 из коробки
• Мультиюзерная авторизация, пресеты, поиск по истории
• Артефакты, OpenAPI Actions и переключение моделей на лету
🛠 Быстрый запуск:
git clone LibreChat-AI/LibreChat && cd LibreChat && docker compose up -d
💡 Где пригодится: команда сравнивает ответы GPT и Claude на одном промпте без прыжков между вкладками и биллингами.
🔗 Официальный репозиторий
#софт #opensource
👉 Telegram: @the_sintez
#shorts #нейросети #ai #софт #технологии
4 likes · 658 views
One home for your AI models!
LibreChat unifies cloud and local LLM chats, with custom agents, MCP tools, and file Q&A. Great for individuals or teams juggling providers; cloud APIs may cost extra.
LibreChat-AI/LibreChat
#AITools #SelfHosted
1 like · 24 views
Mentions
LibreChat's first registered account can become the admin boundary LibreChat's first registered account can become the admin boundary LibreChat is a multi-user chat interface with email, OAuth and LDAP login support, roles, groups, shared resources and an optional admin panel. Its Docker documentation states that in an unscoped single-tenant deployment the first account registered becomes the administrator. The admin panel is a separate service that reuses LibreChat authentication and checks admin authority on every request. On 2026-11-05, a count-only ZoomEye query with sub_type=all, page 1 and page size 1 returned 12,429 matches for app="LibreChat". The title query returned 13,430. Those counts identify application surfaces, not deployments with open registration or an unclaimed first-admin slot. The first-user rule changes the deployment sequence. If registration is enabled on a public instance before the owner creates an account, an unexpected visitor may become the first user and receive the administrator role. The documentation says tenant-scoped deployments must provision administrators through a trusted flow rather than relying on first-user promotion. A self-hosted administrator should understand which mode applies before exposing the hostname. Claim the identity plane first Create the initial administrator from a controlled network, then decide whether public registration should remain enabled. If the instance is intended for a fixed team, use SSO and pre-provision or invite users. Review ALLOW_REGISTRATION, social registration and password reset settings together. An SSO-only deployment with a public local login path can bypass the intended identity provider. The admin panel needs its own network and session controls. It manages users, groups, roles, permissions and live configuration. Its documentation says it stores no data of its own; changes go through LibreChat's admin API and database. That makes the admin session powerful, but also means a service-account or API token from the panel deserves the same protection as an administrator login. Check role overrides and group membership when investigating data exposure. A user may be able to share an agent, prompt, MCP server or conversation under a permission that was enabled for a broad group. Shared links add another external path. Review the permissions matrix rather than checking only the login role name. Use HTTPS, secure cookies and a trusted proxy configuration. Restrict the admin panel to the administrative network even if the user-facing chat is public. Log admin sign-ins, configuration changes, role grants and shared-link creation. Rotate the session secret if it was exposed, and review existing sessions after any administrator role change. The ZoomEye result is a discovery lead. It does not prove that a first admin is unclaimed. Verify the deployment configuration, registration state and admin panel exposure on assets you own. If an unexpected admin account exists, preserve its authentication, role and audit records, disable it, and review all configuration changes made during its session. References - LibreChat Docker deployment, first admin account - LibreChat Admin Panel documentation - LibreChat access control - ZoomEye app="LibreChat" observation
LibreChat: Enhanced ChatGPT Clone with Agents, MCP, Skills, Code Interpreter and AI model switching (46k stars) What it does All text below is quoted directly from the project README. >Enhanced ChatGPT Clone: Features Agents, MCP, Skills, DeepSeek, Anthropic, AWS, OpenAI, Responses API, Azure, Groq, o1, GPT-5, Mistral, OpenRouter, Vertex AI, Gemini, Artifacts, AI model switching, message search, Code Interpreter, DALL-E, and more. Features: - UI & Experience inspired by ChatGPT with enhanced design and features - AI Model Selection: Anthropic (Claude), AWS Bedrock, OpenAI, Azure OpenAI, Google, Vertex AI, OpenAI Responses API (incl. Azure) - Code Interpreter API: Secure, Sandboxed Execution in Python, Node.js (JS/TS), Go, C/C++, Java, PHP, Rust, and Fortran - Agents & Tools Integration: No-Code Custom Assistants: Build specialized, AI-driven helpers - Web Search: Search the internet and retrieve relevant information to enhance your AI context - Generative UI with Code Artifacts: Code Artifacts create React, HTML, and Mermaid content directly in chat - Resumable Streams: Never lose a response: AI responses automatically reconnect and resume if your connection drops - Speech & Audio: Chat hands-free with Speech-to-Text and Text-to-Speech >Bundled with the Docker Compose stacks for one-command setup Repository LibreChat-AI/LibreChat Repository stats |Metric|Value| |:-|:-| |Stars|45,960| |Forks|9,453| |Last release|None| |Languages|TypeScript 84.8%, JavaScript 14.7%, CSS 0.2%| |Contributors|474| |AI contributor accounts (Claude / Codex / Cursor / Copilot)|Copilot: 18, claude: 64| |AI co-authored commits|Claude: 75, Cursor: 3, Copilot: 25| Main contributor |Field|Value| |:-|:-| |Name|Danny Avila| |GitHub|@danny-avila| |Commits to this repo|3,996 (top contributor)| |X / Twitter|@lgtm_hbu| |Followers|1350| |Public repos|38| |On GitHub since|2022-08-01| ────────────────────────────── 📌 How many great GitHub repos have you discovered and completely forgotten about? Don't let another useful tool disappear into your Reddit feed. Get the community's best repos, organized by category, plus key takeaways from real developer discussions, delivered to your inbox twice a week. 📬 Never lose track of great repos again. Subscribe free.
LibreChat: свой ChatGPT со всеми моделями #shorts LibreChat: свой ChatGPT со всеми моделями Один self-hosted интерфейс вместо пяти подписок: OpenAI, Anthropic, Gemini, DeepSeek, Groq, Mistral, OpenRouter и Vertex AI в одном окне. Меняешь модель прямо в чате, платишь только за токены. ⚡ Главные фичи: • Агенты, MCP, Skills, Code Interpreter и DALL-E-3 из коробки • Мультиюзерная авторизация, пресеты, поиск по истории • Артефакты, OpenAPI Actions и переключение моделей на лету 🛠 Быстрый запуск: git clone LibreChat-AI/LibreChat && cd LibreChat && docker compose up -d 💡 Где пригодится: команда сравнивает ответы GPT и Claude на одном промпте без прыжков между вкладками и биллингами. 🔗 Официальный репозиторий #софт #opensource 👉 Telegram: @the_sintez #shorts #нейросети #ai #софт #технологии
One home for your AI models! LibreChat unifies cloud and local LLM chats, with custom agents, MCP tools, and file Q&A. Great for individuals or teams juggling providers; cloud APIs may cost extra. LibreChat-AI/LibreChat #AITools #SelfHosted