High · published November 29, 2025
🚨 A carefully crafted OpenAPI spec is all it takes to unlock the door to sensitive URLs! ⚡ LibreChat versions prior to 0.8.1-rc2 are hit by a sneaky SSRF vulnerability that lets authenticated users access resources meant to be hidden. Think of this like a restaurant with a hidden access door that only staff can use — if a clever diner figures out how to get their hands on the key (or, in this case, the OpenAPI spec), they could wander into the kitchen and see all the ingredients and secrets behind the dishes! An attacker with authenticated access could exploit this vulnerability to reach internal resources like cloud metadata services, possibly impersonating the server itself. This could lead to sensitive information exposure and unauthorized actions, making it a serious threat to the overall security of your environment.
Think of this like a restaurant with a hidden access door that only staff can use — if a clever diner figures out how to get their hands on the key (or, in this case, the OpenAPI spec), they could wander into the kitchen and see all the ingredients and secrets behind the dishes! This SSRF vulnerability allows an authenticated user to send specially crafted requests through LibreChat's Actions feature, enabling access to internal URLs that should remain off-limits. By leveraging this flaw, an attacker could potentially impersonate the server and access sensitive data.
An attacker with authenticated access could exploit this vulnerability to reach internal resources like cloud metadata services, possibly impersonating the server itself. This could lead to sensitive information exposure and unauthorized actions, making it a serious threat to the overall security of your environment. Patch your LibreChat instance to version 0.8.1-rc2 immediately to close off this vulnerability. Additionally, review access controls to ensure only trusted users have access to the Actions feature and monitor logs for any suspicious activities. You're on the right track! By taking these steps, you can protect your server and become a security hero! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| librechat/librechat | < 0.8.1 | 0.8.1 |
| librechat/librechat | all versions | — |
| librechat/librechat | all versions | — |