ZoomEye finds 12,283 exposed LibreChat instances holding model keys
A ZoomEye scan on 23 October 2026 returned 12,283 matches for app="LibreChat" and 13,265 for title="LibreChat", with 7,588 on port 3080. Exposed deployments store conversation history, uploaded files and provider API keys, creating both data-loss and financial risk.
- 12,283 matches for app="LibreChat", 13,265 for title="LibreChat"
- 7,588 instances kept the default port 3080
- A compromise exposes chat history and provider model keys
- Open registration hands outsiders access to configured keys
Read next
Security