CVE-2026-54024 | danny-avila LibreChat up to 0.8.4 Configuration /api/convos/import createMulterInstance allocation of resources (GHSA-52f6-fqwv-jccf)

June 25, 2026 Yanac

A vulnerability identified as problematic has been detected in danny-avila LibreChat. This issue affects the function createMulterInstance of the file /api/convos/import of the component Configuration Handler. The manipulation leads to allocation of resources.

This vulnerability is traded as CVE-2026-54024. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More