VDB
CVE-2025-69222
CVE-2025-69222
PUBLISHED
CVSS 9.100000381469727 CRITICAL
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missing restrictions of the Actions feature in the default configuration. LibreChat enables users to configure agents with predefined instructions and actions that can interact with remote services via OpenAPI specifications, supporting various HTTP methods, parameters, and authentication methods including custom headers. By default, there are no restrictions on accessible services, which means agents can also access internal components like the RAG API included in the default Docker Compose setup. This issue is fixed in version 0.8.1-rc2.
EPSS 4.59% · 91.6th percentile
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
EPSS Score
4.59%
91.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| danny-avila | LibreChat | >= 0.8.1-rc2, 0.8.2-rc2, >= 0.8.1-rc2, 0.8.2-rc2 |
| librechat | librechat | 0.8.1, 0.8.1, 0.8.1 |
Timeline
- Jan 7, 2026 CVE Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 7, 2026 PoC Published
- Jan 8, 2026 EPSS Score
- Jan 12, 2026 EPSS Score
- Jan 15, 2026 EPSS Score
- Jan 19, 2026 EPSS Score
- Jan 22, 2026 EPSS Score
- Jan 26, 2026 EPSS Score