{"data":{"id":"1b8ba6cc-8259-4630-a276-e78df9ed3bf0","title":"CVE-2025-69221: LibreChat is a ChatGPT clone with additional features. Version 0.8.1-rc2 does not enforce proper access control when…","summary":"LibreChat version 0.8.1-rc2 does not enforce proper access control when querying agent permissions. An authenticated attacker who knows an agent ID can read that agent's permissions, including those individually assigned to other users, even without permissions on the agent.","solution":"Fixed in version 0.8.2-rc2.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-69221","publishedAt":"2026-01-08T02:15:59.760Z","cveId":"CVE-2025-69221","cweIds":["CWE-284","CWE-862","CWE-862"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LibreChat"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LibreChat agent permissions readable by authenticated users via agent ID","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00279,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:47.863Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality"],"aiComponentTargeted":"agent","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[]}}