Description
In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| LibreChat | LibreChat | 0.8.1-rc2 | — |
Medium · 6.3
CVE-2026-33265
EUVD-2026-12813GHSA-59wr-fjj3-mr2w
In LibreChat 0.8.1-rc2, a logged-in user obtains a JWT for both the LibreChat API and the RAG API.
Published Mar 18, 2026 · Updated Mar 18, 2026 · Assigned by mitre