Lucene search
+L

CVE-2025-66201

🗓️ 29 Nov 2025 01:26:18Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov👁 54 Views

LibreChat before 0.8.1-rc2 enables server side forgery via Actions with crafted OpenAPI specs; fixed in 0.8.1-rc2.

Related
Detection
Affected
Refs
ReporterTitlePublishedViews
Family
cgr
Chainguard
CVE-2025-66201 vulnerabilities
7 Jan 202601:30
–cgr
circl
Circl
CVE-2025-66201
29 Nov 202509:02
–circl
cnnvd
CNNVD
LibreChat code-related vulnerabilities
29 Nov 202500:00
–cnnvd
cvelist
Cvelist
CVE-2025-66201 LibreChat is Vulnerable to Server-Side Request Forgery (SSRF) in Actions Capability
29 Nov 202501:26
–cvelist
euvd
EUVD
EUVD-2025-199888
29 Nov 202501:26
–euvd
mend
Mend
CVE-2025-66201
29 Nov 202501:26
–mend
nvd
NVD
CVE-2025-66201
29 Nov 202502:15
–nvd
osv_cga
osv_cga
CGA-55J6-5P5Q-H4GG
3 Dec 202513:56
–osv_cga
osv_cga
osv_cga
CGA-57MG-HVRR-PRJX
2 Dec 202515:39
–osv_cga
osv_cga
osv_cga
CGA-P2M5-5Q57-V826
3 Dec 202513:56
–osv_cga
Rows per page
NVD
Vulners
Node
OR
[
  {
    "vendor": "danny-avila",
    "product": "LibreChat",
    "versions": [
      {
        "version": "< 0.8.1-rc2",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

07 Oct 2026 20:10Current
5.7Medium risk
Vulners AI Score5.7
CVSS 3.18.1
CVSS 48.6
EPSS0.00292
SSVC
54