Access Control Vulnerability in LibreChat by Danny Avila

CVE-2025-69221

What is CVE-2025-69221?

LibreChat, a ChatGPT clone with enhanced features, has a vulnerability in version 0.8.1-rc2 related to access control. This flaw allows an authenticated attacker to query and read the permissions assigned to arbitrary agents within the system, even if the attacker lacks permission for those agents. Although private agents should remain concealed and only visible to their assigned users, an attacker can exploit this vulnerability by knowing the specific agent ID. This leads to potential exposure of sensitive permissions details. The issue has been addressed in subsequent releases, specifically version 0.8.2-rc2, which fixes the access control weaknesses.

References