CVE-2024-11169
Librechat ≤ 0.7.6
Raw vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2024-11169 is a high-severity Misinterpretation of Input (CWE-115) vulnerability in Librechat Librechat. Its CVSS base score is 7.5 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique LSASS Memory (T1003.001); ranked in the top 40% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
This vulnerability is AI-related — categorised as LLM Application Platforms; in the Supply Chain and Deployment risk domain.
The strongest mitigations our analysis identified map to SI-10 (Information Input Validation) — see the control section below for these in your framework.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-7054
Vulnerability Data
An unhandled exception in danny-avila/librechat version 3c94ff2 can lead to a server crash. The issue occurs when the fs module throws an exception while handling file uploads. An unauthenticated user can trigger this exception by sending a specially crafted request,…
more
causing the server to crash. The vulnerability is fixed in version 0.7.6.
- CWE(s)
AI Security AnalysisAI
- AI Category
- LLM Application Platforms
- Risk Domain
- Supply Chain and Deployment
- OWASP Top 10 for LLMs 2025
- None mapped
- Classification Reason
- Matched keywords: librechat
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Input validation directly stops the system from accepting and acting on misinterpreted data values.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Secure SDLC practices directly require correct input parsing/validation to avoid misinterpretation flaws.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Secure development lifecycle mandates input validation and canonicalization that directly prevent misinterpretation of inputs.
A.8.26 requires identifying and specifying security requirements (including input validation, resilience against SQL injections, integrity checks, and output controls) that can stop misinterpretation of input from being exploitable, but this is only a minority slice of CWE-115 because the control itself performs no validation or enforcement and depends on other controls to implement the requirements.
Secure architecture principles include defensive input processing and error handling that reduce misinterpretation risks.
Secure coding standards require strict input validation and canonical forms to eliminate misinterpretation vulnerabilities.
Security testing can detect input misinterpretation flaws but does not itself implement the preventive controls.