← All advisories

Critical severity9.8NVD Advisory· Published Jul 22, 2024· Updated Jun 17, 2026

CVE-2024-41704

CVE-2024-41704

Description

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images.

Affected products

4

Librechat/Librechatllm-fuzzy4 versions
<=0.7.4-rc1+ 3 more
- (no CPE)range: <=0.7.4-rc1
- (no CPE)
- cpe:2.3:a:librechat:librechat:*:*:*:*:*:*:*:*range: <=0.7.3
- cpe:2.3:a:librechat:librechat:0.7.4:rc1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

github.com/danny-avila/LibreChat/pull/3363nvdIssue TrackingPatch
github.com/realestate-com-au/vulnerability-disclosures/blob/main/LibreChat/CVE-2024-41704.mdnvd

News mentions

0

No linked articles in our index yet.