Lisa Gnedt

The web interface exposes sensitive SNMP authentication and encryption keys within HTTP responses. This information is accessible to users assigned the `Service` or `Admin` roles.

Exposure of the session signing secret allows an administrator of a remote site with config sync enabled to hijack sessions on the central site by forging session cookies.

LibreChat version 0.8.1-rc2 utilizes the same JWT secret for both the user session mechanism and the RAG API, which compromises the service-level authentication of the RAG API. This shared secret creates a security issue where authentication for the RAG API is vulnerable due to the reuse of the JWT secret. The RAG API is an endpoint used for Retrieval-Augmented Generation, a technique used to enhance the capabilities of large language models. JWT (JSON Web Token) is a standard for securely transmitting information between parties as a JSON object.

A logged-in user can obtain a JWT (JSON Web Token) for both the LibreChat API and the RAG API. This allows access to both APIs with the user's credentials. The JWT token can be abused.

The software contains a flaw due to improper neutralization of input. An attacker who can manipulate a host's check output can inject malicious JavaScript into the Synthetic Monitoring HTML logs. This injected code can then be accessed through a specially crafted phishing link.

A Cross-Site Scripting (XSS) issue exists in Checkmk's distributed monitoring functionality. A compromised remote site can inject malicious HTML code into service outputs on the central site. This allows for potential JavaScript injection and Remote Code Execution (RCE) in distributed setups.

The Windows License plugin for the Checkmk Windows Agent contains a flaw related to the use of an insecure temporary directory, which can lead to privilege escalation.

A flaw exists in the report scheduler of Checkmk that allows authenticated attackers to define the storage location of report file pairs outside of the intended root directory due to insufficient escaping. This could allow for unauthorized file access or modification.