LibreChat, a ChatGPT clone, prior to version 0.8.4, improperly handles the 'name' field returned by its execute_code sandbox. When using the default local file storage strategy, malicious filenames containing directory traversal sequences (e.g., ../../../../../app/client/dist/poc.txt) are concatenated directly into the server-side file path and written without sanitization. This results in an arbitrary file write vulnerability (CWE-22) exploitable by any user able to invoke execute_code. The vulnerability is addressed in LibreChat 0.8.4.

An attacker with the ability to trigger the execute_code function can write arbitrary files to the server filesystem as the LibreChat server user. This could lead to unauthorized modification of server files, potentially enabling further attacks or disruption of service. There is no direct confidentiality or availability impact indicated. The CVSS score is 6.3 (medium severity), reflecting the need for low privileges but high attack complexity.

Upgrade LibreChat to version 0.8.4 or later, where this vulnerability is fixed. Since no official patch link or vendor advisory is provided, users should verify the version in use and apply the update accordingly. Patch status is not explicitly confirmed beyond the statement that the issue is fixed in 0.8.4, so checking the vendor's official release notes is recommended for current remediation guidance.