Danny-Avila Librechat vulnerabilities

CVE-2024-10361 [CRITICAL] CWE-22 CVE-2024-10361: An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifi An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /api/files endpoint. This vulnerability arises from improper input validation, allowing path traversal techniques to delete arbitrary files on the server. Attackers can exploit this to bypass security mechanisms and delete files outs

CVE-2025-8850 [HIGH] CWE-440 CVE-2025-8850: In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authen In danny-avila/librechat version 0.7.9, there is an insecure API design issue in the 2-Factor Authentication (2FA) flow. The system allows users to disable 2FA without requiring a valid OTP or backup code, bypassing the intended verification process. This vulnerability occurs because the backend does not properly validate the OTP or backup code when the

CVE-2024-11170 [HIGH] CWE-29 CVE-2024-11170: A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improp A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in version 0.7.6.

CVE-2025-8848 [MEDIUM] CWE-94 CVE-2025-8848: A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Lang A vulnerability in danny-avila/librechat version 0.7.9 allows for HTML injection via the Accept-Language header. When a logged-in user sends an HTTP GET request with a crafted Accept-Language header, arbitrary HTML can be injected into the tag of the response. This can lead to potential security risks such as cross-site scripting (XSS) attacks.

CVE-2025-7104 [HIGH] CWE-915 CVE-2025-7104: A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulner A mass assignment vulnerability exists in danny-avila/librechat, affecting all versions. This vulnerability allows attackers to manipulate sensitive fields by automatically binding user-provided data to internal object properties or database fields without proper filtering. As a result, any extra fields in the request body are included in agentData and

CVE-2024-11169 [HIGH] CWE-115 CVE-2024-11169: An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issu An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request, causing the server to crash. The vulnerability is fixed in version 0.7.6.

CVE-2024-11172 [HIGH] CWE-248 CVE-2024-11172: A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to c A vulnerability in danny-avila/librechat version git a1647d7 allows an unauthenticated attacker to cause a denial of service by sending a crafted payload to the server. The middleware `checkBan` is not surrounded by a try-catch block, and an unhandled exception will cause the server to crash. This issue is fixed in version 0.7.6.

CVE-2025-8849 [HIGH] CWE-400 CVE-2025-8849: LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessively large values are submitted. This results in the

CVE-2024-10366 [MEDIUM] CWE-639 CVE-2024-10366: An improper access control vulnerability (IDOR) exists in the delete attachments functionality of da An improper access control vulnerability (IDOR) exists in the delete attachments functionality of danny-avila/librechat version v0.7.5-rc2. The endpoint does not verify whether the provided attachment ID belongs to the current user, allowing any authenticated user to delete attachments of other users.

CVE-2024-11173 [MEDIUM] CWE-248 CVE-2024-11173: An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the s An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to exploit this vulnerability, LibreChat allows open regist

CVE-2025-7106 [MEDIUM] CWE-284 CVE-2025-7106: danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access co danny-avila/librechat is affected by an authorization bypass vulnerability due to improper access control checks. The `checkAccess` function in `api/server/middleware/roles/access.js` uses `permissions.some()` to validate permissions, which incorrectly grants access if only one of multiple required permissions is present. This allows users with the 'U

CVE-2024-11167 [MEDIUM] CWE-639 CVE-2024-11167: An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows aut An improper access control vulnerability in danny-avila/librechat versions prior to 0.7.6 allows authenticated users to delete other users' prompts via the groupid parameter. This issue occurs because the endpoint does not verify whether the provided prompt ID belongs to the current user.

CVE-2024-12580 [MEDIUM] CWE-117 CVE-2024-12580: A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The A vulnerability in danny-avila/librechat prior to version 0.7.6 allows for logs debug injection. The parameters sessionId, fileId, userId, and file_id in the /code/download/:sessionId/:fileId and /download/:userId/:file_id APIs are not validated or filtered, leading to potential log injection attacks. This can cause distortion of monitoring and inve

CVE-2024-10363 [MEDIUM] CWE-862 CVE-2024-10363: In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users In version 0.7.5 of danny-avila/LibreChat, there is an improper access control vulnerability. Users can share, use, and create prompts without being granted permission by the admin. This can break application logic and permissions, allowing unauthorized actions.

CVE-2024-10359 [MEDIUM] CWE-915 CVE-2024-10359: In danny-avila/librechat version v0.7.5-rc2, a vulnerability exists in the preset creation functiona In danny-avila/librechat version v0.7.5-rc2, a vulnerability exists in the preset creation functionality where a user can manipulate the user ID field through mass assignment. This allows an attacker to inject a different user ID into the preset object, causing the preset to appear in the UI of another user. The vulnerability arises because the back

CVE-2025-6088 [LOW] CWE-285 CVE-2025-6088: In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation shari In version 0.7.8 of danny-avila/librechat, improper authorization controls in the conversation sharing feature allow unauthorized access to other users' conversations if the conversation ID is known. Although UUIDv4 conversation IDs are generated server-side and are difficult to brute force, they can be obtained from less-protected sources such as server