471 matches found
CVE-2025-69221 LibreChat has Insufficient Access Control for Agent Permission Queries
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control when querying agent permissions. An authenticated attacker can read the permissions of arbitrary agents, even if they have no permissions for this agent. LibreChat allows the...
CVE-2025-69221
CVE-2025-69221 concerns LibreChat, a ChatGPT–clone. In version 0.8.1-rc2, access control when querying agent permissions is insufficient: an authenticated attacker can read permissions for arbitrary agents, including permissions assigned to other users, even when they lack rights for that agent. ...
CVE-2025-69220 LibreChat has Insufficient Access Control for Agent Files
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files to t...
GHSA-JC85-FPWF-QM7X vulnerabilities
Vulnerabilities for packages: kibana...
GHSA-8GW3-RXH4-V6JX vulnerabilities
Vulnerabilities for packages: kibana, librechat...
CVE-2025-66201 vulnerabilities
Vulnerabilities for packages: librechat...
CVE-2025-13204 vulnerabilities
Vulnerabilities for packages: kibana, librechat...
CVE-2025-12735 vulnerabilities
Vulnerabilities for packages: kibana...
CVE-2025-13033 vulnerabilities
Vulnerabilities for packages: kibana, librechat, jitsucom-jitsu...
LibreChat 代码问题漏洞
LibreChat is a free, highly customizable, unified AI conversation platform open-sourced by LibreChat, capable of aggregating and running large models from any vendor in a single interface. A code issue vulnerability exists in LibreChat version 0.8.1-rc2, which stems from a missing restriction in...
LibreChat 安全漏洞
LibreChat is a free, highly customizable, unified AI conversation platform open-sourced by LibreChat, capable of aggregating and running large models from any vendor in a single interface. A security vulnerability exists in LibreChat version 0.8.1-rc2, which stems from improper access control for...
PT-2026-1934
Name of the Vulnerable Software and Affected Versions LibreChat version 0.8.1-rc2 Description LibreChat, a ChatGPT clone with additional features, is susceptible to a server-side request forgery SSRF issue. This occurs because of missing restrictions within the Actions feature in its default...
PT-2026-1932
Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.2-rc2 Description LibreChat, a ChatGPT clone, does not properly control access when uploading files to an agent's file context or during file searches in version 0.8.1-rc2. An authenticated attacker who knows an...
LibreChat 安全漏洞
LibreChat is a free, highly customizable, unified AI conversation platform open-sourced by LibreChat, capable of aggregating and running large models from any vendor in a single interface. A security vulnerability exists in LibreChat version 0.8.1-rc2, which stems from improper access control whe...
PT-2026-1933
Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.8.2-rc2 Description LibreChat, a ChatGPT clone with additional features, does not properly enforce access control when querying agent permissions in version 0.8.1-rc2. An authenticated attacker can read the...
GHSA-R399-636X-V7F6 vulnerabilities
Vulnerabilities for packages: langfuse-fips, kibana, langfuse, librechat...
CVE-2025-68665 vulnerabilities
Vulnerabilities for packages: langfuse-fips, kibana, langfuse, librechat...
CVE-2025-66452 vulnerabilities
Vulnerabilities for packages: librechat...