LibreChat version 0.8.1-rc2 uses the same JWT secret for the user session mechanism and RAG API which compromises the service-level authentication of the RAG AP…

LibreChat version 0.8.1-rc2 contains a critical authentication vulnerability where the same JWT secret is used for both user session mechanism and RAG API authentication. This shared secret compromises the service-level authentication of the RAG API, potentially allowing unauthorized access. The vulnerability affects the authentication mechanisms that protect API access controls. Users should upgrade to a patched version to remediate this authentication bypass issue.