Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.66%
Published
Mar 20, 2025
Modified
Jul 15, 2025
Public PoC / Exploit
All weaponized →No public PoC or exploit code indexed for this CVE.
Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
A vulnerability in danny-avila/librechat version git 81f2936 allows for path traversal due to improper sanitization of file paths by the multer middleware. This can lead to arbitrary file write and potentially remote code execution. The issue is fixed in version 0.7.6.
Weaknesses (CWE)
Affected Products (1)
References (2)