PT-2026-26053 · Librechat · Librechat

Lisa Gnedt + 1 · Published 2026-03-18 · Updated 2026-03-18 · CVE-2025-41258

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions LibreChat version 0.8.1-rc2

Description LibreChat version 0.8.1-rc2 utilizes the same JWT secret for both the user session mechanism and the RAG API, which compromises the service-level authentication of the RAG API. This shared secret creates a security issue where authentication for the RAG API is vulnerable due to the reuse of the JWT secret. The RAG API is an endpoint used for Retrieval-Augmented Generation, a technique used to enhance the capabilities of large language models. JWT (JSON Web Token) is a standard for securely transmitting information between parties as a JSON object.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2025-41258

Affected Products

Librechat

References · 6

• 🔥 https://github.com/sbaresearch/advisories/tree/public/2025/SBA-ADV-20251205-01_LibreChat_RAG_API_Authentication_Bypass · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-41258 · Security Note
• https://github.com/danny-avila/LibreChat · Note
• https://twitter.com/TheHackerWire/status/2034248154099626071 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2034314234922738129 · Twitter Post
• https://twitter.com/CVEnew/status/2034365294714720613 · Twitter Post