danny-avila LibreChat up to 0.8.4 Conversation /api/convos/fork allocation of resources

Summaryinfo

A vulnerability was found in danny-avila LibreChat. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /api/convos/fork of the component Conversation Handler. This manipulation causes allocation of resources. This vulnerability is registered as CVE-2026-54037. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

Detailsinfo

A vulnerability has been found in danny-avila LibreChat and classified as problematic. Affected by this vulnerability is an unknown code block of the file /api/convos/fork of the component Conversation Handler. The manipulation with an unknown input leads to a allocation of resources vulnerability. The CWE definition for the vulnerability is CWE-770. The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor. As an impact it is known to affect availability. The summary by CVE is:

LibreChat is an enhanced ChatGPT clone that supports multiple AI providers. Prior to 0.8.4-rc1, the fix for CVE-2025-7105 added forkIpLimiter and forkUserLimiter rate limiters to POST /api/convos/fork to prevent rapid-fire conversation duplication. However, the POST /api/convos/duplicate endpoint — which is in the same file and performs the exact same expensive database operations — was not given any rate limiter. An authenticated user can bypass the CVE-2025-7105 fix by using /duplicate instead of /fork to exhaust server resources. This vulnerability is fixed in 0.8.4-rc1.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-54037 since 06/11/2026. The exploitation appears to be easy. The attack can be launched remotely. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1499 for this issue.

Upgrading to version 0.8.4-rc1 eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Chat Software

Vendor

• danny-avila

Name

• LibreChat

Version

• 0.7.5
• 0.7.6
• 0.7.7
• 0.7.8
• 0.7.9
• 0.7.9-rc1
• 0.8.0-rc2
• 0.8.1
• 0.8.1-rc2
• 0.8.2
• 0.8.2-rc2
• 0.8.2-rc3
• 0.8.3
• 0.8.3-rc1
• 0.8.3-rc2
• 0.8.4

Website

• Product: https://github.com/danny-avila/LibreChat/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion