Server Crash Vulnerability in Librechat by Danny Avila

CVE-2024-11169

What is CVE-2024-11169?

An unhandled exception within the Librechat application, specifically in version 3c94ff2, allows unauthenticated users to cause a server crash during file upload operations. This occurs when the file system module fails to manage exceptions correctly, enabling attackers to exploit the vulnerability through specially crafted requests. A fix is implemented in version 0.7.6 to address this issue.

References