← Database

CVE-2025-41258

HIGH CVSS: 8.0 Published: 2026-03-18 Modified: 2026-06-17

Description

LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG API.

Affected Platforms

Librechat Librechat

Weakness Type

CWE-284

References