CVE-2025-66451 - CVE House

Back to Database

Status published Medium CVE-2025-66451

LibreChat's Improper Input Validation in Prompt Creation API Enables Unauthorized Permission Changes

5.3 CVSS

Vulnerability Description

LibreChat is a ChatGPT clone with additional features. In versions 0.8.0 and below, when creating prompts, JSON requests are sent to define and modify the prompts via PATCH endpoint for prompt groups (/api/prompts/groups/:groupId). However, the request bodies are not sufficiently validated for proper input, enabling users to modify prompts in a way that was not intended as part of the front end system. The patchPromptGroup function passes req.body directly to updatePromptGroup() without filtering sensitive fields. This issue is fixed in version 0.8.1.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-66451

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from danny-avila

View All →

Insecure API Design in danny-avila/librechat

Denial of Service in danny-avila/librechat

HTML Injection in Accept-Language Header in danny-avila/librechat

Authorization Bypass due to Incorrect Access Control in danny-avila/librechat

Denial of Service via JavaScript Memory Overflow in danny-avila/librechat

Affected Vendor

danny-avila

View all reports →

Affected Software

LibreChat

Vulnerable Versions:

< 0.8.1

Timeline

Official Publish: December 11th, 2025

Last Modified: December 12th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1059 Command and Scripting Interpreter

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1213 Data from Information Repositories

T1565.002 Stored Data Manipulation