Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

lobe-chat — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in lobe-chat, with AI-generated Chinese analysis, references, and POCs.

Vendor: lobehub

CVE IDTitleCVSSSeverityPublished
CVE-2026-23835 LobeHub Vulnerable to Improper Authorization in Presigned Upload CWE-73 6.5AIMediumAI2026-01-30
CVE-2026-23522 Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion CWE-284 3.7 Low2026-01-19
CVE-2026-23733 Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE) CWE-94 6.4 Medium2026-01-18
CVE-2025-62505 SSRF in lobehub/lobe-chat with native web fetch module CWE-918 3.0 Low2025-10-17
CVE-2025-59426 lobe-chat has an Open Redirect CWE-601 4.3 Medium2025-09-25
CVE-2025-59417 Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages CWE-79 8.2AIHighAI2025-09-18
CVE-2024-32965 ssrf vulnerability in lobe-chat CWE-918 8.1 High2024-11-26
CVE-2024-47066 Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964) CWE-918 9.0 Critical2024-09-23
CVE-2024-37895 API Key Leak in lobe-chat CWE-200 5.7 Medium2024-06-17
CVE-2024-32964 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability CWE-918 9.0 Critical2024-05-10
CVE-2024-24566 Lobe Chat unauthorized access to plugins CWE-284 5.3 Medium2024-01-31

All 11 known CVE vulnerabilities affecting lobe-chat with full Chinese analysis, references, and POCs where available.