Vulnerabilities
Report: CVE-2025-41258 - LibreChat RAG API Authentication Bypass
CVE ID :CVE-2025-41258 Published : March 18, 2026, 11:08 a.m. | 54 minutes ago Description :LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG API. Severity: 8.0 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...