2 matches found
CVE-2026-59100
LobeChat through 2.2.9 contains a broken object level authorization vulnerability that allows authenticated attackers to access and modify other users' chat-group agent data by supplying arbitrary group identifiers. Attackers can invoke the getGroupAgents, updateAgentInGroup, and...
5CVSS6AI score0.00291EPSS
SaveExploits0References7
CVE-2026-59100: Authorization Bypass Through User-Controlled Key
LobeChat through 2.2.9 contains a broken object level authorization vulnerability that allows authenticated attackers to access and modify other users' chat-group agent data by supplying arbitrary group identifiers. Attackers can invoke the getGroupAgents, updateAgentInGroup, and...
5CVSS6AI score0.00291EPSS
SaveExploits0References2
20