UpHeron
All vulnerabilities

Servers and applications

CVE-2025-66201

Server-side Request Forgery (SSRF) in Actions Capability

Severity
High 8.6
Published
26 Nov 2025
Last changed
7 Oct 2026
Added to UpHeron
1 Nov 2026
Fixed in
0.8.1-rc2, 0.8.1
Also known as
GHSA-7m2q-fjwr-5x8v
Sources
NVD, Project advisories (GitHub)

Description

LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by passing specially crafted OpenAPI specs to its "Actions" feature and making the LLM use those actions. It could be used by an authenticated user with access to this feature to access URLs only accessible to the LibreChat server (such as cloud…

Affected software

SoftwareAffected versions
LibreChatServers and applications · cpe:a:librechat:librechat
  • Every version before 0.8.1
  • Version 0.8.1-rc1
  • Version 0.8.1
LibreChatServers and applications · github:librechat-ai/librechat
  • Every version before 0.8.1-rc2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-66201
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-66201
  • GitHub Advisory Database https://github.com/advisories/GHSA-7m2q-fjwr-5x8v
  • github.com https://github.com/LibreChat-AI/LibreChat/security/advisories/GHSA-7m2q-fjwr-5x8v