VDB
CVE-2025-69222
CVE-2025-69222
PUBLISHED
CVSS 9.100000381469727 CRITICAL
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missing restrictions of the Actions feature in the default configuration. LibreChat enables users to configure agents with predefined instructions and actions that can interact with remote services via OpenAPI specifications, supporting various HTTP methods, parameters, and authentication methods including custom headers. By default, there are no restrictions on accessible services, which means agents can also access internal components like the RAG API included in the default Docker Compose setup. This issue is fixed in version 0.8.1-rc2.
EPSS 0.36% · 58.7th percentile
Risk Scores
CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
EPSS Score
0.36%
58.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| danny-avila | LibreChat | >= 0.8.1-rc2, 0.8.2-rc2 |
| librechat | librechat | 0.8.1, 0.8.1 |
Timeline
- Dec 29, 2025 CVE ID Reserved
- Jan 7, 2026 CVE Published
- Jan 7, 2026 CVE Updated
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 8, 2026 EPSS Score
- Jan 11, 2026 EPSS Score
- Jan 14, 2026 EPSS Score
- Jan 17, 2026 EPSS Score
- Jan 21, 2026 EPSS Score