LibreChat Meilisearch Chat Reading Vulnerability

A vulnerability in LibreChat versions 0.0.6 through 0.7.7-rc1 allows unauthorized access to arbitrary chats stored in the Meilisearch engine. This issue arises from an exposed testing endpoint, '/api/search/test', which lacks proper access controls, enabling the reading of chats from any user.

Impact

This vulnerability allows for the unauthorized reading of chats from all users.

Reproduction

To reproduce this vulnerability, send a GET request to the '/api/search/test' endpoint with a query parameter 'q' containing a unique identifier from a chat. Include an authorization bearer token in the request. The response will contain the chat details, including the text and sender information.

Remediation

Users can update to LibreChat version 0.7.7 or later, where this vulnerability has been fixed.