High severity · published Nov 26, 2024
CVE-2024-32965
ssrf vulnerability in lobe-chat
8.6
CVSS
26.1%
EPSS
No
On KEV
Description
Lobe Chat is an open-source, AI chat framework. Versions of lobe-chat prior to 1.19.13 have an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. The jwt token header X-Lobe-Chat-Auth strored proxy address and OpenAI API Key, can be modified to scan an internal network in the target lobe-web environment. This issue has been addressed in release version 1.19.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)26.1% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
lobe-chat · lobehub
< 1.19.13 · source: vendor
LC
Lobe Chat · Lobehub
before 1.19.13 · source: NVD, CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-32965
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-32965
Patch
https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058faf
Exploit
https://github.com/lobehub/lobe-chat/security/advisories/GHSA-2xcc-vm3f-m8rw
More from lobe-chat
9.0
CVE-2024-32964
lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
8.8
CVE-2024-47066
Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
7.6
CVE-2026-72594
lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload
6.4
CVE-2026-23733
Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE)
6.1
CVE-2025-59417
Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages