LibreChat Unhandled Exception Leading to Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in LibreChat version 3c94ff2. The issue arises from an unhandled exception in the 'fs' module during file upload processing, which can cause the server to crash. An unauthenticated user can exploit this vulnerability by sending a specially crafted request that triggers the exception, leading to a server outage.

Impact

Exploitation of this vulnerability causes the server to crash, interrupting service availability.

Reproduction

The vulnerability can be reproduced by sending a file upload request that includes a null byte in the filename. This can be done using a multipart form-data request. After the server processes the request, it will crash due to the uncaught exception caused by the null byte in the file path.

Remediation

Users can update to LibreChat version 0.7.6 or later, where this vulnerability has been fixed.