CVE-2026-33265 Details

A vulnerability exists in LibreChat version 0.8.1-rc2, where a logged-in user can use a JSON Web Token (JWT) to bypass authentication on the RAG API. This issue arises because both the LibreChat API and RAG API share the same JWT secret for user session management, allowing unauthorized access to RAG API endpoints.

It is recommended to use a separate JWT secret for RAG API authentication and to add audience claims to the JWT tokens, validating them in both LibreChat and RAG API. Additionally, separate environment files for each service in the Docker Compose setup can help manage access to sensitive secrets.