LobeHub 安全漏洞

LobeHub is an open-source AI dialogue framework developed by LobeHub. Versions of LobeHub prior to 2.1.48 contained security vulnerabilities. These vulnerabilities stemmed from the WebAPI authentication layer, which trusted client control headers that had only been XOR-encrypted. This allowed...

External Control of File Name or Path

Overview @lobehub/lobehub is a LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...

CVE-2026-23835

CVE-2026-23835 affects Lobehub/LobeHub prior to 1.143.3, where the file upload endpoint (file.createFile) does not validate request integrity, enabling an attacker to intercept and modify upload parameters, create arbitrary files in unintended paths, and misreport file sizes to bypass storage quo...

CVE-2026-23835 LobeHub Vulnerable to Improper Authorization in Presigned Upload

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitra...

CVE-2026-23835 LobeHub Vulnerable to Improper Authorization in Presigned Upload

LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitra...

LobeHub security vulnerability

LobeHub is an open-source AI dialogue framework developed by LobeHub. Versions of LobeHub prior to 1.143.3 contained security vulnerabilities. These vulnerabilities stemmed from the file upload feature not verifying the integrity of requests and allowing manipulation of the file size parameter...

PT-2026-5439

Name of the Vulnerable Software and Affected Versions LobeHub versions prior to 1.143.3 Description LobeHub is an open source human-and-AI-agent network. The file upload feature in Knowledge Base File Upload does not validate the integrity of the upload request, allowing users to intercept and...

Access Control Bypass

Overview @lobehub/lobehub is a LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...

Arbitrary Code Injection

Overview @lobehub/lobehub is a LobeHub - an open-source,comprehensive AI Agent framework that supports speech synthesis, multimodal, and extensible Function Call plugin system. Supports one-click free deployment of your private ChatGPT/LLM web application. Affected versions of this package are...

Cross-site Scripting (XSS)

@lobehub/cha is vulnerable to a Cross-Site Scripting XSS. The vulnerability is due to unsafe SVG rendering due to SVGRenderer using dangerouslySetInnerHTML for image/svg+xml lobeArtifact content. An attacker can inject malicious SVGs via chat messages...

CVE-2025-62505

creationtimestamp| type| source ---|---|--- 2025-10-17 09:26:18+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-fgx4-p8xf-qhp9...

CVE-2025-59417

creationtimestamp| type| source ---|---|--- 2025-09-18 14:23:53+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-m79r-r765-5f9j...

@bentwnghk/chat (>=1.91.2, <=1.91.6), @lobehub/chat (>=1.49.5, <=1.49.12) +1 more potentially affected by CVE-2025-53548 via @clerk/nextjs (>=6.3.1, <=6.17.0)

@clerk/nextjs NPM version =6.3.1, =1.91.2, =1.49.5, =0.17.0-alpha.9, =0.17.3-centauri.0 Source cves: CVE-2025-53548 Source advisory: OSV:GHSA-9MP4-77WG-RWX9...

CVE-2024-32964

creationtimestamp| type| source ---|---|--- 2024-05-10 06:13:02+00:00| published-proof-of-concept| https://github.com/lobehub/lobehub/security/advisories/GHSA-mxhq-xw3g-rphc...

GHSA-PF55-FJ96-XF37 @lobehub/chat vulnerable to unauthorized access to plugins

Description: When the application is password-protected deployed with the ACCESSCODE option, it is possible to access plugins without proper authorization without password. Proof-of-Concept: Let’s suppose that application has been deployed with following command: sudo docker run -d -p 3210:3210 -...