Executive brief
LibreChat, an open-source interface for multiple AI providers, is vulnerable to a resource exhaustion attack. An authenticated user can repeatedly trigger conversation duplication requests without any speed limits, which can overwhelm the database and fill up server storage. This could lead to significant performance slowdowns or a complete service outage for all users.
Technical details
The vulnerability exists in the 'POST /api/convos/duplicate' endpoint in 'api/server/routes/convos.js'. While a previous fix (CVE-2025-7105) implemented 'forkIpLimiter' and 'forkUserLimiter' for the '/fork' endpoint, the '/duplicate' endpoint performs identical expensive database operations—including fetching, cloning, and batch-writing messages to MongoDB—without any rate limiting. An authenticated attacker can exploit this to exhaust MongoDB write throughput, fill disk space with redundant records, or trigger Out-of-Memory (OOM) errors during service restarts. The issue is resolved in version 0.8.4-rc1 by applying appropriate rate limiters to the affected endpoint.
Affected products
- danny-avila LibreChat < 0.8.4-rc1
Timeline
- 2026-06-02: advisory: GitHub Security Advisory published
- 2026-06-25: disclosed: CVE published to NVD