CVE-2025-41258 Details

A vulnerability in LibreChat version 0.8.1-rc2 allows for authentication bypass on the RAG API. This issue arises because the same JSON Web Token (JWT) secret is used for both user session management and RAG API authentication. As a result, an authenticated user can exploit their session token to access RAG API endpoints, bypassing intended access controls. This vulnerability is particularly concerning because the RAG API is typically only accessible internally, requiring either internal network access or the exploitation of another vulnerability to reach it.

It is recommended to use a separate JWT secret for the RAG API authentication and to add audience claims to the JWT tokens, validating them in both LibreChat and the RAG API. This would prevent the reuse of tokens even when the JWT secret is the same. Additionally, using separate environment files for each service in the Docker Compose setup can help manage secrets more effectively.