CVE-2025-66450
Medium
Description
LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when a user posts a question, the iconURL parameter of the POST request can be modified by an attacker. The malicious code is then stored in the chat which can then be shared to other users. When sharing chats with a potentially malicious “tracker”, resources loaded can lead to loss of privacy for users who view the chat link that is sent to them. This issue is fixed in version 0.8.1.
SeverityMedium
CVSS5.4
Exploit probability—
ProductLibrechat
PublishedDec 11, 2025
First seenDec 11, 2025
Weakness typeCWE-80CWE-80
How to fix
Update
- librechat librechat0.8.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| librechat librechat | v < 0.8.1 | 0.8.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.