TI-2025-34602 Aliases CVE-2025-54868

LibreChat exposes arbitrary chats through Meilisearch engine

HIGH 72CWE-285Published 2025-08-05 · Updated 2025-08-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Security bypass
Confidentiality · integrity · availability: High · None · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-285.

Summary

LibreChat is a ChatGPT clone with additional features. In versions 0.0.6 through 0.7.7-rc1, an exposed testing endpoint allows reading arbitrary chats directly from the Meilisearch engine. The endpoint /api/search/test allows for direct access to stored chats in the Meilisearch engine without proper access control. This results in the ability to read chats from arbitrary users. This issue is fixed in version 0.7.7.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00517 44th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by NVD

Fix Fixed LibreChat (danny-avila): 0.7.7

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
danny-avila	LibreChat	0.0.6 to before 0.7.7	0.7.7	Patch available	CNA

LibreChat Vendordanny-avila Affected 0.0.6 to before 0.7.7 Fixed in 0.7.7 Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:librechat:librechat::::::::	0.0.6 to before 0.7.8	Vulnerable	danny-avila

cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:* Versions 0.0.6 to before 0.7.8 Vulnerable ·danny-avila

Remediation

Fix · CNA LibreChat (danny-avila) Fixed in 0.7.7

Timeline

2026-10-02 Threatist record created from CVE-2025-54868

References

Exploit 1

https://github.com/danny-avila/LibreChat/security/advisories/GHSA-p5j8-m4wh-ffmw

Patch 1

https://github.com/danny-avila/LibreChat/commit/0e8041bcac616949c42a68dfb8f108ccc4db5151

TI-2026-25134 LibreChat Exfiltrates Server Secrets via MCP Server URL Injection CVSS 3.1CRITICAL 9.6
TI-2026-17862 LibreChat MCP Stdio Remote Command Execution CVSS 3.1CRITICAL 9.9
TI-2026-38976 LibreChat: Missing Resource Parameter Validation in MCP OAuth Flow CVSS 3.1CRITICAL 9.3
TI-2024-27763 LibreChat through 0.7.4-rc1 has incorrect access control for message updates. CVSS 3.1CRITICAL 9.8
TI-2024-10347 Path Traversal in danny-avila/librechat CVSS 3.0HIGH 8.8
TI-2026-25682 In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API. CVSS 3.1CRITICAL 9.0

See all 50 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences