A vulnerability has been found in danny-avila LibreChat up to 0.8.0 and classified as problematic. Impacted is an unknown function of the component POST Request Handler. This manipulation of the argument iconURL causes basic cross site scripting.
The identification of this vulnerability is CVE-2025-66450. It is possible to initiate the attack remotely. There is no exploit available.
The affected component should be upgraded.
