Log in Start free

Vulnerability · Published Jan 7, 2026 · Assigned by GitHub_M

CVE-2025-69220LibreChat has Insufficient Access Control for Agent Files

High 7.1

In plain English

A high-severity missing authorization in LibreChat from danny-avila. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 27% of all known vulnerabilities).

Severity (CVSS 3.1)7.1High
Exploit odds (30 days)0.3%top 73.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files to the file context or file search, even if they have no permissions for this agent. This issue is fixed in version 0.8.2-rc2.

Affected products (as reported)

VendorProductVersions
danny-avila LibreChat >= 0.8.1-rc2, < 0.8.2-rc2

Weakness: CWE-862, CWE-284 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

References