CVE-2025-8849

LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessively large values are submitted. This results in the inability to create new memories, impacting the stability of the service.

Published Oct 31, 2025

https://huntr.com/bounties/e9d9404c-cd19-4226-a580-9cba14b7d7d6

CVSS ScoreHigh

7.5

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-8849

LibreChat version 0.7.9 is vulnerable to a Denial of Service (DoS) attack due to unbounded parameter values in the `/api/memories` endpoint. The `key` and `value` parameters accept arbitrarily large inputs without proper validation, leading to a null pointer error in the Rust-based backend when excessively large values are submitted. This results in the inability to create new memories, impacting the stability of the service.

Published Oct 31, 2025

https://huntr.com/bounties/e9d9404c-cd19-4226-a580-9cba14b7d7d6

CVSS ScoreHigh

7.5


npm	librechat-data-provider	0.1.0
npm	librechat-data-provider	0.1.1
npm	librechat-data-provider	0.1.2
npm	librechat-data-provider	0.1.3
npm	librechat-data-provider	0.1.4
npm	librechat-data-provider	0.1.5
npm	librechat-data-provider	0.1.6
npm	librechat-data-provider	0.1.7
npm	librechat-data-provider	0.1.8
npm	librechat-data-provider	0.1.9
npm	librechat-data-provider	0.2.0
npm	librechat-data-provider	0.2.1
npm	librechat-data-provider	0.2.5
npm	librechat-data-provider	0.3.0
npm	librechat-data-provider	0.3.1
npm	librechat-data-provider	0.3.2
npm	librechat-data-provider	0.3.3
npm	librechat-data-provider	0.3.4
npm	librechat-data-provider	0.3.5
npm	librechat-data-provider	0.3.6
npm	librechat-data-provider	0.3.7
npm	librechat-data-provider	0.3.8
npm	librechat-data-provider	0.3.9
npm	librechat-data-provider	0.4.0
npm	librechat-data-provider	0.4.1
npm	librechat-data-provider	0.4.2
npm	librechat-data-provider	0.4.3
npm	librechat-data-provider	0.4.4
npm	librechat-data-provider	0.4.5
npm	librechat-data-provider	0.4.6
npm	librechat-data-provider	0.4.7
npm	librechat-data-provider	0.4.8
npm	librechat-data-provider	0.4.9
npm	librechat-data-provider	0.5.0
npm	librechat-data-provider	0.5.1
npm	librechat-data-provider	0.5.2
npm	librechat-data-provider	0.5.3
npm	librechat-data-provider	0.5.4
npm	librechat-data-provider	0.5.5
npm	librechat-data-provider	0.5.6
npm	librechat-data-provider	0.5.7
npm	librechat-data-provider	0.5.8
npm	librechat-data-provider	0.5.9
npm	librechat-data-provider	0.6.0
npm	librechat-data-provider	0.6.1
npm	librechat-data-provider	0.6.2
npm	librechat-data-provider	0.6.3
npm	librechat-data-provider	0.6.4
npm	librechat-data-provider	0.6.5
npm	librechat-data-provider	0.6.6

Ecosystem	Package	Version


npm	librechat-data-provider	0.1.0
npm	librechat-data-provider	0.1.1
npm	librechat-data-provider	0.1.2
npm	librechat-data-provider	0.1.3
npm	librechat-data-provider	0.1.4
npm	librechat-data-provider	0.1.5
npm	librechat-data-provider	0.1.6
npm	librechat-data-provider	0.1.7
npm	librechat-data-provider	0.1.8
npm	librechat-data-provider	0.1.9
npm	librechat-data-provider	0.2.0
npm	librechat-data-provider	0.2.1
npm	librechat-data-provider	0.2.5
npm	librechat-data-provider	0.3.0
npm	librechat-data-provider	0.3.1
npm	librechat-data-provider	0.3.2
npm	librechat-data-provider	0.3.3
npm	librechat-data-provider	0.3.4
npm	librechat-data-provider	0.3.5
npm	librechat-data-provider	0.3.6
npm	librechat-data-provider	0.3.7
npm	librechat-data-provider	0.3.8
npm	librechat-data-provider	0.3.9
npm	librechat-data-provider	0.4.0
npm	librechat-data-provider	0.4.1
npm	librechat-data-provider	0.4.2
npm	librechat-data-provider	0.4.3
npm	librechat-data-provider	0.4.4
npm	librechat-data-provider	0.4.5
npm	librechat-data-provider	0.4.6
npm	librechat-data-provider	0.4.7
npm	librechat-data-provider	0.4.8
npm	librechat-data-provider	0.4.9
npm	librechat-data-provider	0.5.0
npm	librechat-data-provider	0.5.1
npm	librechat-data-provider	0.5.2
npm	librechat-data-provider	0.5.3
npm	librechat-data-provider	0.5.4
npm	librechat-data-provider	0.5.5
npm	librechat-data-provider	0.5.6
npm	librechat-data-provider	0.5.7
npm	librechat-data-provider	0.5.8
npm	librechat-data-provider	0.5.9
npm	librechat-data-provider	0.6.0
npm	librechat-data-provider	0.6.1
npm	librechat-data-provider	0.6.2
npm	librechat-data-provider	0.6.3
npm	librechat-data-provider	0.6.4
npm	librechat-data-provider	0.6.5
npm	librechat-data-provider	0.6.6

Find vulnerabilities. Fix fast with AI.

CVE-2025-8849

CVE-2025-8849