CVE-2025-69222

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-69222
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69222.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-69222
Aliases
  • GHSA-rgjq-4q58-m3q8
Related
Published
2026-01-07T21:17:17.590Z
Modified
2026-07-15T01:48:57.662735928Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L CVSS Calculator
Summary
LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions
Details

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missing restrictions of the Actions feature in the default configuration. LibreChat enables users to configure agents with predefined instructions and actions that can interact with remote services via OpenAPI specifications, supporting various HTTP methods, parameters, and authentication methods including custom headers. By default, there are no restrictions on accessible services, which means agents can also access internal components like the RAG API included in the default Docker Compose setup. This issue is fixed in version 0.8.1-rc2.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69222.json",
    "cwe_ids": [
        "CWE-918"
    ],
    "cna_assigner": "GitHub_M",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": ">= 0.8.1-rc2, 0.8.2-rc2"
                },
                {
                    "last_affected": ">= 0.8.1-rc2, 0.8.2-rc2"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/danny-avila/librechat

Affected ranges

Type
GIT
Repo
https://github.com/danny-avila/librechat
Events
Introduced
b288d81f5a4625403bc880e93059d90d9aa51fe3
Fixed
3b41e392ba5c0d603c1737d8582875e04eaa6e02
Fixed
24e8a258cd8fa1ff42c02cf15408079f1dbe07b0
Database specific 
{
    "extracted_events": [
        {
            "introduced": "0.8.1-NA"
        },
        {
            "last_affected": "0.8.1-NA"
        },
        {
            "introduced": "0.8.1-rc1"
        },
        {
            "last_affected": "0.8.1-rc1"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": [
        "cpe:2.3:a:librechat:librechat:0.8.1:-:*:*:*:*:*:*",
        "cpe:2.3:a:librechat:librechat:0.8.1:rc1:*:*:*:*:*:*"
    ]
}

Affected versions

0.*
0.8.1-NA
0.8.1-rc1
chart-1.*
chart-1.9.4
v0.*
v0.8.1
v0.8.2-rc1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-69222.json"