CVE-2025-8849

⚠️ Huge amounts of data can bring LibreChat to its knees! An unchecked parameter in the `/api/memories` endpoint allows for massive inputs, leading to a frustrating service outage. 🔥 Think of it like a restaurant where customers can order an unlimited number of appetizers without any limits, causing the kitchen to get overwhelmed and unable to serve anyone else. Without limits on these inputs, LibreChat's service can crash, much like a kitchen on a busy night! This Denial of Service (DoS) vulnerability means that if someone submits excessively large values, the system can throw a null pointer error, making it impossible to create new memories. Users could find themselves unable to access vital features, impacting overall service stability and functionality.

This Denial of Service (DoS) vulnerability means that if someone submits excessively large values, the system can throw a null pointer error, making it impossible to create new memories. Users could find themselves unable to access vital features, impacting overall service stability and functionality. To protect against this, limit the size of the `key` and `value` parameters to reasonable bounds and validate input lengths before processing. Additionally, consider updating to the latest version of LibreChat to ensure you have the most secure build available. You've got this! By implementing these changes, you can safeguard your service and keep those memories flowing smoothly. 🛡️