letta-ai / letta

Letta (formerly MemGPT) is a framework for creating LLM services with memory.
https://letta.com
Apache License 2.0
12.88k stars 1.41k forks source link

fix: Fix security vuln with file upload #2067

Closed mattzh72 closed 2 days ago

mattzh72 commented 2 days ago

Description

We now run some file sanitization on the file name when uploading a file. This prevents users from maliciously overriding files on server.

Test

Rely on existing file upload unit tests to make sure functionality is not broken. Also, write a suite of comprehensive unit tests for the file sanitization function.