CVE-2026-33265

Published March 18th, 2026

View on NVD ↗

CVSS v3

6.3

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.

sbaresearch/advisories

Security advisories by SBA Research.

GitHub

27