CVE-2025-66451: LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66451?
CVE-2025-66451 has been rated as a high severity vulnerability due to its potential impact on the confidentiality and integrity of prompt data.
How do I fix CVE-2025-66451?
To fix CVE-2025-66451, upgrade LibreChat to version 0.8.1 or later, where the vulnerability has been addressed.
What versions of LibreChat are affected by CVE-2025-66451?
CVE-2025-66451 affects LibreChat version 0.8.0 and earlier versions.
What types of attacks can exploit CVE-2025-66451?
CVE-2025-66451 can be exploited to manipulate prompt data through insufficient request validation, leading to potential data corruption or unauthorized access.
What components of LibreChat are impacted by CVE-2025-66451?
CVE-2025-66451 impacts the PATCH endpoint for prompt groups in the API, specifically affecting how JSON requests are processed.