CVE-2026-34371 | danny-avila LibreChat up to 0.8.3 writeFileSync path traversal

A vulnerability labeled as critical has been found in danny-avila LibreChat up to 0.8.3. Affected by this vulnerability is the function writeFileSync. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-34371. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.