QwikSec

Security Database

CVE

CWE

Training

CVE-2025-69221

Published: Jan 7, 2026

Modified: Jan 7, 2026

PUBLISHED

CVSS v3.1

4.3

MEDIUM

Description

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control when querying agent permissions. An authenticated attacker can read the permissions of arbitrary agents, even if they have no permissions for this agent. LibreChat allows the configuration of agents that have a predefined set of instructions and context. Private agents are not visible to other users. However, if an attacker knows the agent ID, they can read the permissions of the agent including the permissions individually assigned to other users. This issue is fixed in version 0.8.2-rc2.

Vendor	Product	Versions
danny-avila	LibreChat	affected `< 0.8.1-rc2`

Weaknesses (CWE)

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-5ccx-4r3h-9qc7

x_refsource_CONFIRM

https://github.com/danny-avila/LibreChat/commit/06ba025bd95574c815ac6968454be7d3b024391c

x_refsource_MISC

https://github.com/danny-avila/LibreChat/releases/tag/v0.8.2-rc2

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.