CVE-2025-69221: LibreChat has Insufficient Access Control for Agent Permission Queries
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control when querying agent permissions. An authenticated attacker can read the permissions of arbitrary agents, even if they have no permissions for this agent. LibreChat allows the configuration of agents that have a predefined set of instructions and context. Private agents are not visible to other users. However, if an attacker knows the agent ID, they can read the permissions of the agent including the permissions individually assigned to other users. This issue is fixed in version 0.8.2-rc2.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69221?
CVE-2025-69221 has a moderate severity level due to improper access control allowing authenticated attackers to access agent permissions.
How do I fix CVE-2025-69221?
To fix CVE-2025-69221, update LibreChat to version 0.8.2-rc2 or later where the access control vulnerability has been addressed.
Who is affected by CVE-2025-69221?
CVE-2025-69221 affects users of LibreChat version 0.8.1-rc2 and earlier.
What type of vulnerability is CVE-2025-69221?
CVE-2025-69221 is an access control vulnerability that allows authenticated users to read permissions of arbitrary agents.
Can the CVE-2025-69221 vulnerability be exploited remotely?
No, CVE-2025-69221 requires authentication, so only authenticated users with access can exploit the vulnerability.