LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. A security vulnerability exists in LibreChat version v0.7.5-rc2, which stems from a preset creation feature that allows a user to manipulate the user ID field, potentially causing presets to appear in other user interfaces...

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone. A denial-of-service vulnerability exists in LibreChat that stems from certain API endpoints not handling incorrectly formatted input when received, which can be exploited by an attacker to cause the server to crash...

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone. LibreChat has a security vulnerability that stems from an unhandled exception that can be exploited by an attacker to cause a server crash...

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone. LibreChat suffers from a path traversal vulnerability that stems from the program failing to properly filter special elements in the path of a resource or file, which can be exploited by an attacker to cause arbitrary file writes and remote code execution...

LibreChat 资源管理错误漏洞

LibreChat is an enhanced ChatGPT clone. LibreChat suffers from a denial of service vulnerability that can be exploited by an attacker to cause a server crash...

PT-2025-12102

Name of the Vulnerable Software and Affected Versions danny-avila/librechat versions prior to 0.7.6 Description The issue is related to improper input validation, specifically with the handling of multipart file uploads using multer middleware. When in-memory storage is used, there is no limit on...

LibreChat 访问控制错误漏洞

LibreChat is an enhanced ChatGPT clone. LibreChat suffers from an Improper Access Control vulnerability that can be exploited by an attacker to corrupt application logic and permissions and allow unauthorized operations...

LibreChat 安全漏洞

LibreChat is an enhanced ChatGPT clone by Danny Avila Personal Developer. A security vulnerability exists in LibreChat versions prior to 0.7.6, which stems from an unvalidated parameter and could lead to a log injection attack...

The vulnerability in the checkBan.js script of the LibreChat artificial intelligence-based platform allows a violator to trigger a service denial.

The vulnerability of the checkBan.js script on the LibreChat AI-based platform involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

multer(file upload middleware in express) misused, lead to remote code execution

Description Librechat use multer to handle multi-part file upload. multer library will deal with '../' kind of path traversal, then let the programmer decide the actual filename, then join the path to write the upload the file. this means, if '../' is provided by the user of librechat, multer wil...

Not limitation of upload file size, lead to server crash

Description librechat use multer, which is a middleware which handles streaming multipart fileupload. If use in memory storagemulter by default, can do not limit the upload file size, when handling big file, server will crash for out of memory. Attacker with no privilege can exploit this. Proof o...

unhandled exception caused server crash

Description in javascript express framework, if async router handler throw an exception, the whole server will crash. In librechat, some API, when leading with some malformed input, will have uncaught exception. This will lead to server crash, thus a full denial of service. Mind that although thi...

Allowing execution user provided regexp, lead to Redos

Description librechat have a functionality of uploading chatgpt chat log. when processing the log, following code is executed: const pattern = new RegExp \u3010$citation.metadata.extra.citedmessageidx\u2020.+?\u3011, 'g', ; const replacement = $citation.metadata.title; messageText =...

vulnerability-disclosures

REA Group Security Vulnerability Disclosures REA Groupht...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41704

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

CVE-2024-41703

LibreChat through 0.7.4-rc1 has incorrect access control for message updates...

PT-2024-29525

Name of the Vulnerable Software and Affected Versions LibreChat versions prior to 0.7.4-rc1 Description The issue is related to incorrect access control for message updates. Recommendations For versions prior to 0.7.4-rc1, at the moment, there is no information about a newer version that contains...

CVE-2024-41703

LibreChat up to version 0.7.4-rc1 has an incorrect access control for message updates. The issue is documented across multiple sources (NVD, Red Hat, OSV, CVE lists) with the same description. The CVSS-based impact is listed as critical in NVD (high confidentiality, integrity, and availability im...