PT-2025-48355 · Librechat · Librechat

Published 2025-11-29 · Updated 2025-12-22 · CVE-2025-66201

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.1-rc2

Description LibreChat, a ChatGPT clone with additional features, contains a Server-side Request Forgery (SSRF) issue in its "Actions" feature. An authenticated user with access to this feature can exploit this by submitting specially crafted OpenAPI specifications, causing the Large Language Model (LLM) to utilize these actions. This allows access to URLs accessible only to the LibreChat server, potentially including cloud metadata services, which could lead to server impersonation.

Recommendations Update LibreChat to version 0.8.1-rc2 or later.

Exploit

Fix

SSRF

RCE

Weakness Enumeration

CWE-918

CWE-20

Related Identifiers

CVE-2025-66201

GHSA-7M2Q-FJWR-5X8V

Affected Products

Librechat

References · 7

• 🔥 https://github.com/danny-avila/LibreChat/security/advisories/GHSA-7m2q-fjwr-5x8v · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66201.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-66201 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66201 · Vendor Advisory
• https://twitter.com/DavidMarquet19/status/2003012773391781934 · Twitter Post
• https://t.me/cveNotify/144410 · Telegram Post
• https://t.me/CVEtracker/38452 · Telegram Post