PT-2026-26053 · Librechat · Librechat

Lisa Gnedt + 1 · Publicado 2026-03-18 · Atualizado 2026-03-18 · CVE-2025-41258

Positive Technologies (AI Summary)

CVSS v3.1

8.0

Alta

Vetor base

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreChat version 0.8.1-rc2

Description LibreChat version 0.8.1-rc2 utilizes the same JWT secret for both the user session mechanism and the RAG API, which compromises the service-level authentication of the RAG API. This shared secret creates a security issue where authentication for the RAG API is vulnerable due to the reuse of the JWT secret. The RAG API is an endpoint used for Retrieval-Augmented Generation, a technique used to enhance the capabilities of large language models. JWT (JSON Web Token) is a standard for securely transmitting information between parties as a JSON object.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2026-07914

CVE-2025-41258

Produtos afetados

Librechat

Referências · 7

• 🔥 https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20251205-01_LibreChat_RAG_API_Authentication_Bypass · Exploit
• https://github.com/danny-avila/LibreChat · Nota
• https://twitter.com/CVEnew/status/2034365294714720613 · Publicação no Twitter
• https://twitter.com/TheHackerWire/status/2034248154099626071 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2026-07914 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2034314234922738129 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-41258 · Nota de Segurança