Critical severity · published Jun 23, 2026
CVE-2026-54157
LobeHub: Unauthenticated SSRF in `/webapi/proxy`
9.0
CVSS
1.8%
EPSS
No
On KEV
Description
LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you. Prior to 2.1.57, the /webapi/proxy endpoint on app.lobehub.com accepts a URL in the POST body and fetches it server-side without any authentication. An attacker can use this to make arbitrary outbound requests from LobeHub's infrastructure, leak Vercel deployment details, and inject cookies on the lobehub.com domain through reflected Set-Cookie headers. This vulnerability is fixed in 2.1.57.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
Low
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.8% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LO
lobehub · lobehub
< 2.1.57 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-54157
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-54157
github.com
https://github.com/lobehub/lobehub/security/advisories/GHSA-xmwj-c75x-6346
More from lobehub
7.7
CVE-2026-59095
LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl
7.1
CVE-2026-39411
LobeHub has an unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header
6.5
CVE-2026-85621
LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu
6.5
CVE-2026-59098
LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search
6.5
CVE-2026-58578
LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import