CVE-2024-52787: Librechat

Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue in the upload_documents method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename in an uploaded file.

Affected products

• Librechat Librechat: version 0.0.6 only

Published 2024-11-25. Last modified 2026-06-17.