Denial of Service Vulnerability in LibreChat by danny-avila

CVE-2024-11173

What is CVE-2024-11173?

An unhandled exception vulnerability in the LibreChat software can lead to a denial of service condition. This issue arises when specific API endpoints are fed malformed input, resulting in an uncaught exception that crashes the server. Although exploiting this vulnerability necessitates a valid JWT, the software's open registration feature permits unauthenticated attackers to create accounts, making it possible for them to trigger the denial of service. The vulnerability has been addressed in version 0.7.6.

References