Servers and applications
CVE-2024-11173
An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to exploit this vulnerability, LibreChat allows open registration, enabling unauthenticated attackers to…
- Severity
- Medium 6.5
- Published
- 20 Mar 2025
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 0.7.6
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
LibreChatServers and applications · cpe:a:librechat:librechat |
|