CVE-2026-58580

LobeChat up to version 2.2.9 is affected by broken object-level authorization in MessageModel. An authenticated user who knows another user’s non-enumerable message identifier can overwrite that victim’s plugin tool‑call metadata, plugin state/error, and TTS/translation records via tRPC message p...

MINI-FC8Q-99CM-3C68

Bulletin has no description...

MINI-MWJW-JP43-4FQ4

Bulletin has no description...

MINI-M7VC-X936-JFH8

Bulletin has no description...

MINI-999J-GMVQ-8GRQ

Bulletin has no description...

MINI-7552-GVRH-GV89

Bulletin has no description...

MINI-4GJ7-7387-3746

Bulletin has no description...

MINI-65JP-P3P5-VH7Q

Bulletin has no description...

MINI-GJ96-RH7W-7J2R

Bulletin has no description...

MINI-QCH6-4QQX-2FR9

Bulletin has no description...

MINI-QQW9-3R3Q-9XV3

Bulletin has no description...

MINI-4PF9-HJX8-J7HC

Bulletin has no description...

MINI-X54Q-758H-6JGF

Bulletin has no description...

MINI-4V3H-6XXF-WJ5P

Bulletin has no description...

MINI-9239-94JQ-89WM

Bulletin has no description...

MINI-4H52-HVVQ-F4PQ

Bulletin has no description...

MINI-RM77-HPXH-JW9F

Bulletin has no description...

CVE-2026-55117

creationtimestamp| type| source ---|---|--- 2026-07-02 19:06:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoq2bxh2s2b 2026-07-03 08:31:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq52sxpo22q 2026-07-08 11:01:21+00:00| seen|...

MINI-Q7CX-7C9M-56PP

Bulletin has no description...

CVE-2026-55110

creationtimestamp| type| source ---|---|--- 2026-07-02 18:51:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpop7glvx22w 2026-07-03 07:07:15+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mppydky5l42i 2026-07-08 11:01:21+00:00| seen|...