CVE-2025-69222: LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions
LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 is prone to a server-side request forgery (SSRF) vulnerability due to missing restrictions of the Actions feature in the default configuration. LibreChat enables users to configure agents with predefined instructions and actions that can interact with remote services via OpenAPI specifications, supporting various HTTP methods, parameters, and authentication methods including custom headers. By default, there are no restrictions on accessible services, which means agents can also access internal components like the RAG API included in the default Docker Compose setup. This issue is fixed in version 0.8.1-rc2.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-69222?
CVE-2025-69222 has been classified as a moderate severity vulnerability due to its potential exploitation through SSRF.
How do I fix CVE-2025-69222?
To fix CVE-2025-69222, upgrade LibreChat to version 0.8.2-rc2 or later where the SSRF vulnerability is addressed.
What is the impact of CVE-2025-69222 on LibreChat?
The impact of CVE-2025-69222 allows attackers to manipulate server requests, potentially accessing sensitive internal resources.
Is CVE-2025-69222 present in earlier versions of LibreChat?
Yes, CVE-2025-69222 is present in LibreChat version 0.8.1-rc2 and earlier, making those versions vulnerable.
Can CVE-2025-69222 affect the security of my application?
Yes, CVE-2025-69222 can significantly affect the security of your application by exposing it to SSRF attacks if not patched.