CVE-2025-69220: Librechat broken access control (CVSS 7.1)

Description

LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control for file uploads to an agents file context and file search. An authenticated attacker with access to the agent ID can change the behavior of arbitrary agents by uploading new files to the file context or file search, even if they have no permissions for this agent. This issue is fixed in version 0.8.2-rc2.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityHigh

Privileges requiredLow

User interactionNone

ScopeChanged

ConfidentialityNone

IntegrityHigh

AvailabilityLow

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L

Affected products

Librechat0.8.1

Remediation

No fixed version is recorded in the NVD data. Check the vendor advisory for the latest guidance.

Patch & vendor advisories

References

https://cwe.mitre.org/data/definitions/284.htmlNot Applicable
https://cwe.mitre.org/data/definitions/862.htmlNot Applicable
https://github.com/danny-avila/LibreChat/commit/4b9c6ab1cb9de626736de700c7981f38be08d237Patch
https://github.com/danny-avila/LibreChat/releases/tag/v0.8.2-rc2Release Notes
https://github.com/danny-avila/LibreChat/security/advisories/GHSA-xcmf-rpmh-hg59ExploitVendor Advisory
https://owasp.org/Top10/A01_2021-Broken_Access_ControlNot Applicable
https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/05-Authorization_Testing/02-Testing_for_Bypassing_Authorization_Schema.htmlTechnical Description
https://raw.githubusercontent.com/OWASP/ASVS/v5.0.0/5.0/OWASP_Application_Security_Verification_Standard_5.0.0_en.pdfTechnical Description

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2025-69220 being actively exploited?

CVE-2025-69220 is not in the CISA KEV catalog. A public exploit reference exists, so treat it as exploitable. Its EPSS exploit probability is 0.34%.

How severe is CVE-2025-69220?

CVE-2025-69220 has a CVSS 3.1 base score of 7.1, rated high. EPSS estimates a 0.34% probability of exploitation.

Which products are affected by CVE-2025-69220?

Affected products include Librechat.

How do I fix CVE-2025-69220?

Apply the vendor's patch or advisory guidance, then verify no affected versions remain across your devices.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-69220 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo