{"data":{"id":"0188a769-19bb-4e37-b466-7a7cfa687432","title":"CVE-2025-54868: LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint…","summary":"CVE-2025-54868 affects LibreChat versions 0.0.6 through 0.7.7-rc1. An exposed testing endpoint, /api/search/test, reads stored chats directly from the Meilisearch engine without proper access control, letting an attacker read chats belonging to arbitrary users. The weakness is classified as CWE-285 (Improper Authorization).","solution":"This issue is fixed in version 0.7.7.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-54868","publishedAt":"2025-08-05T09:15:37.950Z","cveId":"CVE-2025-54868","cweIds":["CWE-285"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LibreChat","Meilisearch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LibreChat exposed testing endpoint allows reading arbitrary chats","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00481,"epssCheckedAt":"2026-11-04T18:09:12.971Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T18:09:28.975Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"rag","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}