CVE-2024-10361 is a critical path traversal flaw (CVSS 9.1) in LibreChat v0.7.5-rc2. The /api/files endpoint does not validate input properly, which allows files outside the intended directory to be deleted. The record points to a fix commit, so update to a release that includes it.
What's affected
The CVE record lists danny-avila/librechat version v0.7.5-rc2, and the vulnerable endpoint is /api/files. The description says improper input validation lets path traversal techniques delete arbitrary files, including critical system files, user data or application resources, with an impact on integrity and availability.
The record references a fix commit. The commit message is "fix: avatar handling for agents and assistants". Its description says the agent and assistant controllers stop parsing avatar metadata from the request body, read it from the stored object by ID instead, and include the user ID when deleting the old avatar file. That is consistent with the weakness, since it removes a client supplied value from file deletion. I could not confirm the first release tag that carries the commit, so read the project's release notes.
How to check if you're exposed
Find the version of LibreChat that you run. For a git checkout, check the tag or commit:
git describe --tags
git log -1 --format=%H
For containers, check the image tag. Versions at v0.7.5-rc2 and earlier are in range, and you should check whether your build includes commit 0b744db or a later one.
Then check who can reach the instance. The record gives a network attack vector with no privileges required, so an instance reachable from the internet is the main concern. If the instance runs behind single sign on or on a private network, the exposure is smaller.
What to do now
- Identify every LibreChat deployment, including personal and test ones.
- Update to a release newer than v0.7.5-rc2 that includes the fix commit, and read the release notes.
- Run the application as a user with the least file system rights it needs, so deletion reaches less.
- Put the instance behind authentication or a VPN if it is not meant for the public.
- Back up user data and configuration regularly, so the cost of a deletion is bounded.
Why it matters
Path traversal (CWE-22) happens when a program uses a path from the request to decide which file to work on, without making sure the path stays inside the directory it should. Deletion makes it worse than reading, because the harm cannot be undone without a backup.
The score of 9.1 reflects no required privileges and a network vector, with high impact on integrity and availability and none on confidentiality. A chat platform stores conversation history, uploaded files and configuration, and removing configuration or credentials files can take the service down. The CVE is not on the CISA Known Exploited Vulnerabilities list, and nothing fetched says it is exploited.
Quick check
Does this leak data?
The record shows no confidentiality impact. The harm is deletion of files, which affects integrity and availability.
How was it fixed?
The referenced commit changes how avatar metadata and file deletion are handled, using stored data and the user ID instead of values from the request.
Sources
Last reviewed: 19 October 2026.
