LibreChat vulnerabilities
We track 9 vulnerabilities in LibreChat products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2025.
Latest LibreChat vulnerabilities
- 7.5 High severity
danny-avila/librechat: Uncontrolled Resource Consumption
LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null pointer e
- 8.8 High severity
danny-avila/librechat: Expected Behavior Violation
In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vuln
- 7.5 High severity
danny-avila/librechat: Improperly Controlled Modification of Dynamically-Determined Object Attributes
A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without pro
- 7.5 High severity
danny-avila/librechat: Uncaught Exception
A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware `checkBan` is not surrounded by a try-catch block, and an unhandled exceptio
- 7.5 High severity
danny-avila/librechat: Allocation of Resources Without Limits or Throttling
In danny-avila/librechat version git 0c2a583, there is an improper input validation vulnerability. The application uses multer middleware for handling multipart file uploads. When using in-memory storage (the default setting for multer), there is no limit on t
- 8.8 High severity
danny-avila/librechat: Path Traversal: '..filename'
A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in versi
- 7.5 High severity
danny-avila/librechat: Misinterpretation of Input
An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted r
- 9.1 Critical severity
danny-avila/librechat: Improper Limitation of a Pathname to a Restricted Directory
An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on
- 9.1 Critical severity
librechat: Improper Limitation of a Pathname to a Restricted Directory
An issue in the upload_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename in an uploaded file.