All vulnerabilities

Servers and applications

CVE-2024-11173

An unhandled exception in the danny-avila/librechat repository, version git 600d217, can cause the server to crash, leading to a full denial of service. This issue occurs when certain API endpoints receive malformed input, resulting in an uncaught exception. Although a valid JWT is required to exploit this vulnerability, LibreChat allows open registration, enabling unauthenticated attackers to…

Severity
Medium 6.5
Published
20 Mar 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
0.7.6
Sources
NVD

Affected software

SoftwareAffected versions
LibreChatServers and applications · cpe:a:librechat:librechat
  • Every version before 0.7.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-11173
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-11173