The vulnerability exists in LibreChat up to version 0.8.3. A shared‑agent editor can delete file records via the DELETE /api/files endpoint. Because the file records are globally shared, deleting them removes the file for all agents that reference it, not just the shared agent. This violates cross‑agent integrity: the private agents owned by the file’s owner lose a valid file_id and silently break. The weakness is an authorization flaw—CWE‑863—allowing an editor to affect resources outside its intended scope.

danny‑avila: LibreChat releases up to and including 0.8.3 are impacted. Users running these versions on any operating system with the web API exposed are affected. The upgrade to 0.8.4 contains the fix.

The CVSS score of 5.7 indicates a moderate severity. The EPSS score is not available, making the current exploitation probability uncertain. The vulnerability is not listed in the CISA KEV catalog. Likely attack involves an authenticated user with shared‑agent editing rights performing a DELETE request via the API or web interface, which will delete files that other private agents rely on. Because the attack relies on existing permissions, the risk is moderate but it can silently disrupt multiple agents without user awareness.