CVE-2025-69220

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-69220

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69220.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-69220

Aliases

GHSA-xcmf-rpmh-hg59

Downstream

CGA (6)

Published

2026-01-07T20:49:00Z

Modified

2026-09-24T11:46:16Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L CVSS Calculator

Summary

LibreChat has Insufficient Access Control for Agent Files

Details

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files to the file context or file search, even if they have no permissions for this agent. This issue is fixed in version 0.8.2-rc2.

Database specific

{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-284",
        "CWE-862"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69220.json"
}

References

Affected packages

Git / github.com/danny-avila/librechat

Affected ranges

Type

GIT

Repo

https://github.com/danny-avila/librechat

Events

Introduced

f0f81945fb80e821f839d8fb29ccae0aaa471511

Fixed

24e8a258cd8fa1ff42c02cf15408079f1dbe07b0

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0.8.1-rc2"
        },
        {
            "fixed":  "0.8.2-rc2"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Type

GIT

Repo

https://github.com/librechat-ai/librechat

Events

Introduced

Fixed

4b9c6ab1cb9de626736de700c7981f38be08d237

Database specific

Show details

{
    "source":  "REFERENCES"
}

Affected versions

0.*

0.8.1-NA

0.8.1-rc1

chart-1.*

chart-1.9.0

chart-1.9.1

chart-1.9.2

chart-1.9.3

chart-1.9.4

librechat-1.*

librechat-1.8.9

v0.*

v0.0.1

v0.0.2

v0.0.3

v0.0.6

v0.1.0

v0.1.1

v0.2.0

v0.3.0

v0.3.3

v0.4.0

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.4.7

v0.4.8

v0.5.0

v0.5.1

v0.5.2

v0.5.3

v0.5.4

v0.5.5

v0.5.6

v0.5.7

v0.5.8

v0.5.9

v0.6.0

v0.6.1

v0.6.10

v0.6.5

v0.6.6

v0.6.9

v0.7.0

v0.7.1

v0.7.2

v0.7.3

v0.7.3-rc

v0.7.3-rc2

v0.7.4

v0.7.4-rc1

v0.7.5

v0.7.5-rc1

v0.7.5-rc2

v0.7.6

v0.7.6-rc1

v0.7.7

v0.7.7-rc1

v0.7.8

v0.7.8-rc1

v0.7.9

v0.7.9-rc1

v0.8.0

v0.8.0-rc1

v0.8.0-rc2

v0.8.0-rc3

v0.8.0-rc4

v0.8.1

v0.8.1-rc1

v0.8.1-rc2

v0.8.2-rc1

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69220.json"