72439 matches found
CVE-2026-58580 LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibli...
CVE-2026-58580
LobeChat up to version 2.2.9 is affected by broken object-level authorization in MessageModel. An authenticated user who knows another user’s non-enumerable message identifier can overwrite that victim’s plugin tool‑call metadata, plugin state/error, and TTS/translation records via tRPC message p...
MINI-FC8Q-99CM-3C68
Bulletin has no description...
MINI-MWJW-JP43-4FQ4
Bulletin has no description...
MINI-M7VC-X936-JFH8
Bulletin has no description...
MINI-7552-GVRH-GV89
Bulletin has no description...
MINI-GJ96-RH7W-7J2R
Bulletin has no description...
MINI-65JP-P3P5-VH7Q
Bulletin has no description...
MINI-4GJ7-7387-3746
Bulletin has no description...
MINI-999J-GMVQ-8GRQ
Bulletin has no description...
MINI-QCH6-4QQX-2FR9
Bulletin has no description...
MINI-4V3H-6XXF-WJ5P
Bulletin has no description...
MINI-X54Q-758H-6JGF
Bulletin has no description...
MINI-QQW9-3R3Q-9XV3
Bulletin has no description...
MINI-4PF9-HJX8-J7HC
Bulletin has no description...
MINI-9239-94JQ-89WM
Bulletin has no description...
MINI-4H52-HVVQ-F4PQ
Bulletin has no description...
MINI-RM77-HPXH-JW9F
Bulletin has no description...
CVE-2026-55117
creationtimestamp| type| source ---|---|--- 2026-07-02 19:06:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpoq2bxh2s2b 2026-07-03 08:31:51+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpq52sxpo22q 2026-07-08 11:01:21+00:00| seen|...