Denial of Service Vulnerability in LibreChat by Danny Avila

CVE-2024-11172

What is CVE-2024-11172?

A vulnerability in LibreChat, specifically in version git a1647d7, allows unauthenticated attackers to exploit a flaw in the middleware. The lack of proper exception handling in the checkBan function can lead to an unhandled exception, which crashes the server when it receives a specially crafted payload. This issue is addressed in the updated version 0.7.6, emphasizing the importance of regular updates and robust error handling to maintain server integrity.

References