High severity8.1NVD Advisory· Published Nov 29, 2025· Updated Jun 17, 2026

CVE-2025-66201

Description

LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by passing specially crafted OpenAPI specs to its "Actions" feature and making the LLM use those actions. It could be used by an authenticated user with access to this feature to access URLs only accessible to the LibreChat server (such as cloud metadata services, through which impersonation of the server might be possible). This issue has been patched in version 0.8.1-rc2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Librechat/Librechat5 versions
cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:*range: <0.8.1
- cpe:2.3:a:librechat:librechat:0.8.1:-:*:*:*:*:*:*
- cpe:2.3:a:librechat:librechat:0.8.1:rc1:*:*:*:*:*:*
- (no CPE)range: <0.8.1-rc2
- (no CPE)range: < 0.8.1-rc2
GitHub/LibreChatllm-create
Range: <0.8.1-rc2
osv-coords3 versions
pkg:apk/chainguard/librechat pkg:apk/chainguard/librechat-compat pkg:apk/chainguard/librechat-dev
< 0.8.1-r0+ 2 more
- (no CPE)range: < 0.8.1-r0
- (no CPE)range: < 0.8.1-r0
- (no CPE)range: < 0.8.1-r0

Patches

Vulnerability mechanics

References

github.com/danny-avila/LibreChat/security/advisories/GHSA-7m2q-fjwr-5x8vnvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000