CVE-2026-34371
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk17th percentile - higher than 17% of all known CVEs
Summary
LibreChat prior to version 0.8.4 trusts the 'name' field returned by the execute_code sandbox when persisting code-generated artifacts. An attacker can use traversal sequences (e.g., '../../') in the filename, leading to arbitrary file write on the server without validation.
Risk Assessment
Any user who can trigger execute_code can overwrite arbitrary files on the server, potentially leading to full compromise of the application or server.
Recommendation
Immediately update LibreChat to version 0.8.4 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the execute_code sandbox when persisting code-generated artifacts. On deployments using the default local file strategy, a malicious artifact filename containing traversal sequences (for example, ../../../../../app/client/dist/poc.txt) is concatenated into the server-side destination path and written with fs.writeFileSync() without sanitization. This gives any user who can trigger execute_code an arbitrary file write primitive as the LibreChat server user. This vulnerability is fixed in 0.8.4.