CVE-2024-11170
📋 TL;DR
A path traversal vulnerability in danny-avila/librechat allows attackers to write files to arbitrary locations on the server due to improper sanitization in the multer middleware. This can lead to remote code execution by overwriting critical system files. All instances running vulnerable versions of librechat are affected.
💻 Affected Systems
- danny-avila/librechat
📦 What is this software?
Librechat by Librechat
⚠️ Risk & Real-World Impact
Worst Case
Remote code execution leading to complete system compromise, data theft, and lateral movement within the network.
Likely Case
Arbitrary file write allowing attackers to modify configuration files, inject malicious code, or disrupt service availability.
If Mitigated
Limited impact if proper file system permissions restrict write access to sensitive directories.
🎯 Exploit Status
Exploitation requires understanding of path traversal techniques and the ability to upload files. No public exploit code is currently available.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: 0.7.6
Vendor Advisory: https://github.com/danny-avila/librechat/commit/629be5c0ca2b332178524b4e3f6fac715aea8cc4
Restart Required: No
Instructions:
1. Update librechat to version 0.7.6 or later. 2. Run 'npm update' to ensure all dependencies are updated. 3. Verify the fix by checking the version and testing file upload functionality.
🔧 Temporary Workarounds
Disable file upload functionality
allTemporarily disable file upload features in librechat configuration to prevent exploitation.
Modify librechat configuration to disable file upload endpoints
Implement strict file path validation
allAdd custom middleware to validate and sanitize file paths before processing.
Implement path normalization and validation in multer configuration
🧯 If You Can't Patch
- Implement strict file system permissions to restrict write access to sensitive directories
- Deploy a web application firewall (WAF) with path traversal protection rules
🔍 How to Verify
Check if Vulnerable:
Check if librechat version is below 0.7.6 and review multer middleware configuration for path sanitization.Check Version:
npm list librechat | grep librechatVerify Fix Applied:
Verify the version is 0.7.6 or later and test file upload functionality with malicious path traversal attempts.📡 Detection & Monitoring
Log Indicators:
- Unusual file write operations outside expected directories
- Multiple failed file upload attempts with path traversal patterns
Network Indicators:
- HTTP requests containing '../' or similar path traversal sequences in file upload parameters
SIEM Query:
source="web_logs" AND (url="*../*" OR params="*../*") AND method="POST"