216.73.216.233

CVE-2025-69222

· Published 07/01/2026 22:15 · Modified 08/01/2026 18:08

Labels: CVE-2025-69222 2026-01-07CVE-2025-69222CWE-918[email protected]

Essential information

Published
07/01/2026 22:15
Modified
08/01/2026 18:08
Author
Creator
CVSS
9.1 CRITICAL (v3.1)
CISA KEV
No
CWE
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L

CVSS metrics

Description

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missing restrictions of the Actions feature in the default configuration. LibreChat enables users to configure agents with predefined instructions and actions that can interact with remote services via OpenAPI specifications, supporting various HTTP methods, parameters, and authentication methods including custom headers. By default, there are no restrictions on accessible services, which means agents can also access internal components like the RAG API included in the default Docker Compose setup. This issue is fixed in version 0.8.1-rc2.

NVD status

Status
Undergoing Analysis — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
librechat / librechat cpe:2.3:a:librechat:librechat:0.8.1-rc2:*:*:*:*:*:*:*

References