---
id: CVE-2025-66201
title: LibreChat is a ChatGPT clone with additional features
summary: >-
  LibreChat is a ChatGPT clone with additional features. Prior to version
  0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by
  passing specially crafted OpenAPI specs to its "Actions" feature and making
  the LLM use …
severity: high
cvss: 8.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N'
cwe:
  - CWE-20
  - CWE-918
  - CWE-918
vendor: librechat
product: librechat
affected:
  - librechat < 0.8.1
  - librechat = 0.8.1
patched:
  - librechat 0.8.1
published: '2025-11-29'
updated: '2026-10-07'
sourceUpdated: '2026-10-07T20:10:01.970'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-66201'
references:
  - url: >-
      https://github.com/danny-avila/LibreChat/security/advisories/GHSA-7m2q-fjwr-5x8v
    label: security-advisories@github.com
  - url: >-
      https://github.com/danny-avila/LibreChat/security/advisories/GHSA-7m2q-fjwr-5x8v
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
epss: 0.00292
epssPercentile: 0.19868
ingestedAt: '2026-10-07T20:46:46.736Z'
---

## Overview

LibreChat is a ChatGPT clone with additional features. Prior to version 0.8.1-rc2, LibreChat is vulnerable to Server-side Request Forgery (SSRF), by passing specially crafted OpenAPI specs to its "Actions" feature and making the LLM use those actions. It could be used by an authenticated user with access to this feature to access URLs only accessible to the LibreChat server (such as cloud metadata services, through which impersonation of the server might be possible). This issue has been patched in version 0.8.1-rc2.

## Affected

- `librechat < 0.8.1`
- `librechat = 0.8.1`

## Remediation

Upgrade past the affected range:

- `librechat 0.8.1`