CVE-2025-69221CWE-284CWE-862broken-access-control

CVE-2025-69221

Medium · published January 8, 2026

CVSS v3.1
4.3
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control when

querying agent permissions. An authenticated attacker can read the permissions of arbitrary agents, even if they have no permissions for this agent. LibreChat allows the configuration of agents that have a predefined set of instructions and context. Private agents are not visible to other users. However, if an attacker knows the agent ID, they can read the permissions of the agent including the permissions individually assigned to other users. This issue is fixed in version 0.8.2-rc2.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-862 · Missing Authorization
Published
2026-01-08T02:15Z
Affected products (2)
ProductVersionsFixed in
librechat/librechatall versions—
librechat/librechatall versions—
References (3)
https://github.com/danny-avila/LibreChat/commit/06ba025bd95574c815ac6968454be7d3b024391c · [email protected]https://github.com/danny-avila/LibreChat/releases/tag/v0.8.2-rc2 · [email protected]https://github.com/danny-avila/LibreChat/security/advisories/GHSA-5ccx-4r3h-9qc7 · [email protected]
EPSS history
Timeline
  • 07 JAN 21:01Z
    LibreChat has Insufficient Access Control for Agent Permission Queries
    cvelistv5