A chat application is a friendly interface over a credential store. LibreChat's deployment documentation asks the operator to supply provider keys for the models it will call, and those keys live in the application's configuration, which means the application is a secret store with a text box on it.

The measurements

On 23 October 2026, ZoomEye returned 12,283 matches for app="LibreChat", 13,265 matches for title="LibreChat", and 7,588 matches for title="LibreChat" && port="3080".
The fingerprint and title counts are within eight percent of each other, which is the pattern of a clean signature. The port-constrained count covers roughly fifty-seven percent of the title population, so the 3080 default is common but not dominant. A majority of deployments sit somewhere else, typically behind a proxy on a standard TLS port.

What the application holds

LibreChat stores conversation history per user, uploaded files used in conversations, and the configuration for each model endpoint it can call. Providers are configured with keys, and the administrator interface is where those keys are entered.
The consequence is that a compromised deployment yields two distinct losses. The conversation history is a data loss, and its value depends on what users typed into it. The provider keys are a financial and access loss, and their value depends on what those keys can reach in the upstream account.
A key that can create fine-tuned models, list files, or call the most expensive model in the catalogue is worth more than a key scoped to one endpoint. That distinction lives entirely on the provider side, and it is invisible in any external measurement.

Reading the port split

The 7,588 hosts on 3080 are deployments that kept the documented default. The remaining 5,677 title matches are deployments that changed the port or put a proxy in front, which usually indicates a deliberate production setup.
Neither group is more secure by construction. A proxy terminates TLS and can add a source restriction, and it can also be configured to pass everything through without one. Port 3080 direct means the application answers without that intermediary, which removes a layer of policy but also removes a layer of complexity.
The useful inference is narrower: a deployment that moved off the default port has an operator who made at least one deliberate decision. A deployment that kept it may not have.

What an operator should check

Confirm who can register. LibreChat supports multiple authentication strategies and the choice determines whether an outsider can join. An instance that accepts open registration is an instance that hands out access to whatever upstream keys the administrator configured.
Then review the model endpoint configuration. A provider key entered once and never rotated is common, and rotation is a five-minute task that changes the blast radius of a leak.
Then decide what conversation retention means for your organisation. A chat interface that keeps every conversation indefinitely is a data store that grows without a review. Retention settings and export controls are the levers, and both are configuration rather than code.

What the numbers cannot tell you

Twelve thousand matches describe a population, and the population includes test instances, personal deployments, and production installations with equal weight. Nothing in the query distinguishes them, and nothing in the query reveals a release version.
The honest conclusion is about scale rather than defect. This is a product deployed widely enough that automated scanning against it is worthwhile for someone, and its role as a credential holder makes a compromise more expensive than the visible interface suggests.

The pattern across this batch

Every product measured here has the same structural property: a small interface in front of a large amount of trust. The counts differ by three orders of magnitude between the smallest and the largest, and the question an operator faces does not change with the number. What does this interface hold, who can reach it, and what would the holder of its credentials be able to do next.

References

  • LibreChat documentation, https://www.librechat.ai/docs

  • LibreChat project repository, https://github.com/danny-avila/LibreChat

  • ZoomEye AI query results collected 23 October 2026 for app="LibreChat", title="LibreChat", and title="LibreChat" && port="3080", sub-type all