Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-85621— LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu

Quick assessment

Affected
lobehub lobehub
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

LobeHub是LobeHub团队开源的一个全平台AI对话框架。 LobeHub 2.2.15及之前版本存在输入验证错误漏洞，该漏洞源于QQ和飞书适配器未正确验证入站聊天平台Webhook签名，QQ适配器未对消息事件进行Ed25519签名验证，飞书适配器仅进行可选的静态令牌比较且未配置令牌时跳过，导致未经身份验证的攻击者通过构造伪造消息并冒充可信发送者，使机器人代理处理攻击者控制的输入。

CVSS 6.5 · Medium EPSS 0.20% · P10

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 1

VendorProduct Version RangeStatus
lobehub lobehub ≤ 2.2.15 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-85621

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu
Source: CVE Program / CVE List V5
Vulnerability Description
LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route (/api/agent/webhooks/:platform) is unauthenticated by design and delegates verification to each adapter; the QQ adapter performs no Ed25519 signature verification on dispatched message events, and the Feishu adapter only performs an optional static-token comparison that is skipped when no token is configured (the default) and is not a body signature. An unauthenticated attacker who knows the public webhook URL can POST forged inbound messages with an attacker-chosen sender identity and arbitrary text, causing the bot owner's agent to process attacker-controlled input and treat the attacker as a trusted platform sender.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5
Vulnerability Title
LobeHub 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
LobeHub是LobeHub团队开源的一个全平台AI对话框架。 LobeHub 2.2.15及之前版本存在输入验证错误漏洞，该漏洞源于QQ和飞书适配器未正确验证入站聊天平台Webhook签名，QQ适配器未对消息事件进行Ed25519签名验证，飞书适配器仅进行可选的静态令牌比较且未配置令牌时跳过，导致未经身份验证的攻击者通过构造伪造消息并冒充可信发送者，使机器人代理处理攻击者控制的输入。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
lobehub lobehub 0 ~ 2.2.15 -

II. Public POCs for CVE-2026-85621

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-85621

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-85621 (1)

Vendor Pages for CVE-2026-85621 (1)

Other References for CVE-2026-85621 (1)

IV. Related Vulnerabilities

Same product: lobehub
Same vendor: lobehub
Same weakness: CWE-345