Lucene search
+L

CVE-2025-66451 LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes

🗓️ 11 Dec 2025 22:33:24Reported by GitHub_MType 
cvelist
 cvelist
🔗 www.cve.org👁 37 Views

CVE-2025-66451: LibreChat up to 0.8.0 allows unauthorized permission changes due to improper input validation in prompt creation

Related
Affected
Refs
ReporterTitlePublishedViews
Family
cgr
Chainguard
CVE-2025-66451 vulnerabilities
17 Dec 202519:17
–cgr
circl
Circl
CVE-2025-66451
11 Dec 202523:15
–circl
cnnvd
CNNVD
LibreChat security vulnerability
11 Dec 202500:00
–cnnvd
cve
CVE
CVE-2025-66451
11 Dec 202522:33
–cve
euvd
EUVD
EUVD-2025-202929
11 Dec 202522:33
–euvd
mend
Mend
CVE-2025-66451
11 Dec 202522:33
–mend
nvd
NVD
CVE-2025-66451
11 Dec 202523:15
–nvd
osv_cga
osv_cga
CGA-7RX6-GJ5H-VJMC
16 Dec 202516:08
–osv_cga
osv_cga
osv_cga
CGA-CMQH-CJHG-M3Q6
29 Jan 202600:46
–osv_cga
osv_cga
osv_cga
CGA-M2MM-58H3-6MG6
16 Dec 202516:03
–osv_cga
Rows per page
[
  {
    "vendor": "danny-avila",
    "product": "LibreChat",
    "versions": [
      {
        "version": "< 0.8.1",
        "status": "affected"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation