EUVD-2026-71228

LobeChat LobeHub 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route /api/agent/webhooks/:platform is unauthenticated by design and delegates verification to each adapter; the QQ adapter performs no Ed25519 signature verificatio...

CVE-2026-85621

LobeChat (LobeHub) 2.2.1 has an improper webhook signature verification flaw in its QQ and Feishu adapters . The webhook route (/api/agent/webhooks/:platform) is unauthenticated by design and delegates verification to each adapter. The QQ adapter performs no Ed25519 signature verification on disp...