PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-34371 danny-avila CVE debrief

CVE-2026-34371 is an arbitrary file write vulnerability in LibreChat, a ChatGPT clone, prior to version 0.8.4. The execute_code sandbox feature trusts user-inputted filenames, allowing malicious users to write files to arbitrary locations on the server using traversal sequences. This vulnerability can be exploited by providing a malicious filename containing traversal sequences, which is then concatenated into the server-side destination path and written with fs.writeFileSync() without proper sanitization. As a result, an attacker can achieve an arbitrary file write primitive as the LibreChat server user. Users of LibreChat versions prior to 0.8.4 should be aware of this vulnerability and take immediate action to upgrade. The vulnerability has a CVSS score of 6.3 and a severity of MEDIUM. Evidence is limited to public sources and may not reflect the full scope or impact of the vulnerability.

Vendor
danny-avila
Product
LibreChat
CVSS
MEDIUM 6.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-04-07
Original CVE updated
2026-07-24
Advisory published
2026-04-07
Advisory updated
2026-07-24

Who should care

Users of LibreChat versions prior to 0.8.4 should be aware of this vulnerability and take immediate action to upgrade. Security teams monitoring for potential file write attacks should also prioritize this CVE.

Technical summary

The vulnerability exists in the execute_code sandbox feature of LibreChat. When a user triggers the execute_code feature, the application trusts the name field returned by the sandbox and uses it to persist code-generated artifacts. On deployments using the default local file strategy, an attacker can provide a malicious filename containing traversal sequences (e.g., ../../../../../app/client/dist/poc.txt). This filename is concatenated into the server-side destination path and written with fs.writeFileSync() without proper sanitization, allowing an arbitrary file write primitive as the LibreChat server user.

Defensive priority

High

Recommended defensive actions

  • Upgrade LibreChat to version 0.8.4 or later
  • Review and sanitize user-inputted filenames in the execute_code sandbox
  • Implement additional monitoring for potential file write attacks
  • Restrict access to the execute_code feature to trusted users
  • Perform a thorough review of system logs to detect potential exploitation attempts
  • Conduct a vulnerability scan to identify potentially affected systems
  • Establish a remediation timeline based on risk assessment and resource availability

Evidence notes

The CVE record was published on 2026-04-07T22:16:22.227Z and last modified on 2026-07-24T22:10:00.140Z. The NVD entry is currently Analyzed. The vulnerability has a CVSS score of 6.3 and a severity of MEDIUM. Evidence is limited to public sources and may not reflect the full scope or impact of the vulnerability. Defenders should verify affected deployments and review official advisories for specific guidance.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-04-07T22:16:22.227Z and has not been modified since then. The NVD entry is currently Analyzed.