LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images. (Work on a fixed version release has started in PR 3363.)
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')