All vulnerabilities

Servers and applications

CVE-2025-8849

LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessively large values are submitted. This results in the inability to create new memories,…

Severity
High 7.5
Published
31 Oct 2025
Last changed
7 Oct 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
LibreChatServers and applications · cpe:a:librechat:librechat
  • Version 0.7.9

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-8849
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-8849