CVE-2024-41703

CRITICAL

Librechat < 0.7.3 - Improper Access Control

Title source: rule

LibreChat through 0.7.4-rc1 has incorrect access control for message updates.

Core 3

Core References

Various Sources

Issue Tracking

Patch

CVSS v3 9.8

EPSS 0.0014

EPSS Percentile 33.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

CWE

CWE-284

Status published

Products (2)

librechat/librechat 0.7.4 rc1

librechat/librechat < 0.7.3

Published Jul 22, 2024

Tracked Since Feb 18, 2026