LibreChat Denial-of-Service Vulnerability in checkBan Middleware

A denial-of-service vulnerability has been identified in LibreChat version git a1647d7. The issue allows an unauthenticated attacker to crash the server by sending a crafted payload. The vulnerability arises because the middleware function 'checkBan' lacks proper error handling; unhandled exceptions can lead to server crashes. This issue has been addressed in version 0.7.6.

Impact

Exploitation of this vulnerability causes the server to crash, leading to a denial-of-service condition.

Remediation

Users can upgrade to LibreChat version 0.7.6 or later to address this vulnerability.