{"data":{"id":"ada88930-2752-4eb8-b62e-0d356f130fd0","title":"CVE-2025-66201: LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to…","summary":"LibreChat versions prior to 0.8.1-rc2 contain a Server-side Request Forgery (SSRF) flaw in the \"Actions\" feature. An authenticated user with access to that feature can supply specially crafted OpenAPI specs and cause the LLM to invoke those actions, reaching URLs only the LibreChat server can access, such as cloud metadata services, which may allow impersonation of the server.","solution":"Fixed in version 0.8.1-rc2.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-66201","publishedAt":"2025-11-29T07:15:52.420Z","cveId":"CVE-2025-66201","cweIds":["CWE-20","CWE-918","CWE-918"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["LibreChat","ChatGPT"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LibreChat server-side request forgery through Actions OpenAPI specs","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00313,"epssCheckedAt":"2026-11-04T12:08:35.257Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T06:10:27.895Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}