high8.0
CVE-2025-41258
LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG A…
Impact
LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG API.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Librechat | Librechat | Version 0.8.1 |