VULNERABILITY INTELLIGENCE

CVE-2026-33265

CVSS score9 CRITICAL

EPSS probability0.24%

CISA KEVNot currently listed

Published2026-03-18

Last modified2026-06-17

Description

In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.