Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the execute_code sandbox when persisting code-generated artifacts. On deployments using the default local file strategy, a malicious artifact filename containing traversal sequences (for example, ../../../../../app/client/dist/poc.txt) is concatenated into the server-side destination path and written with fs.writeFileSync() without sanitization. This gives any user who can trigger execute_code an arbitrary file write primitive as the LibreChat server user. This vulnerability is fixed in 0.8.4.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-34371 LibreChat is a ChatGPT clone with additional features. Prior to 0.8.4, LibreChat trusts the name field returned by the execute_code sandbox when persisting code-gener… https://www.cve.org/CVERecord?id=CVE-2026-34371
Post summary
The text notes a CVE in LibreChat related to untrusted sandbox name fields but provides no PoC, exploit, patch, or detailed technical description.
CVE-2026-34371 Arbitrary File Write via Path Traversal in LibreChat Before 0.8.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-34371
Post summary
The post announces CVE‑2026‑34371 as an arbitrary file write via path traversal flaw in LibreChat versions prior to 0.8.4, linking to a vulnerability details page.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | librechat | librechat | - | - | - |