← Database

CVE-2024-41704

CRITICAL CVSS: 9.8 Published: 2024-07-22 Modified: 2026-06-17

Description

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images.

Affected Platforms

Librechat Librechat

Weakness Type

CWE-22, CWE-22

References