PT-2026-1932 · Librechat · Librechat

Published 2026-01-07 · Updated 2026-01-07 · CVE-2025-69220

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.2-rc2

Description LibreChat, a ChatGPT clone, does not properly control access when uploading files to an agent's file context or during file searches in version 0.8.1-rc2. An authenticated attacker who knows an agent ID can modify the behavior of agents by uploading files, even without proper permissions. The issue involves improper access control related to file uploads and searches within the agent's file context.

Recommendations Update to version 0.8.2-rc2 or later.

Exploit

Fix

Missing Authorization

Improper Access Control

Weakness Enumeration

CWE-862

CWE-284

Related Identifiers

CVE-2025-69220

GHSA-XCMF-RPMH-HG59

Affected Products

Librechat

References · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69220.json · Exploit
• https://github.com/danny-avila/LibreChat/security/advisories/GHSA-xcmf-rpmh-hg59 · Vendor Advisory
• https://github.com/danny-avila/LibreChat/commit/4b9c6ab1cb9de626736de700c7981f38be08d237 · Patch
• https://osv.dev/vulnerability/CVE-2025-69220 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-69220 · Security Note
• https://github.com/danny-avila/LibreChat/releases/tag/v0.8.2-rc2 · Note
• https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/05-Authorization_Testing/02-Testing_for_Bypassing_Authorization_Schema.html · Note
• https://cwe.mitre.org/data/definitions/284.html · Note
• https://raw.githubusercontent.com/OWASP/ASVS/v5.0.0/5.0/OWASP_Application_Security_Verification_Standard_5.0.0_en.pdf · Note
• https://owasp.org/Top10/A01_2021-Broken_Access_Control · Note
• https://twitter.com/CVEnew/status/2009020519195267081 · Twitter Post
• https://cwe.mitre.org/data/definitions/862.html · Note