Login Request a demo
LO
Product
lobe-chat
by lobehub · last CVE Aug 10, 2026
12
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 3Medium 6Low 2
Severity
All severities12Critical1High3Medium6Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lobe-chat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-32964
9.0
53%
May 14
Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system
Affected: before 0.150.6
CVE-2024-47066
8.8
12%
Sep 23
Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
Affected: < 1.19.13
CVE-2024-32965
8.6
26%
Nov 26
ssrf vulnerability in lobe-chat
Affected: < 1.19.13
CVE-2026-72594
7.6
0%
Aug 10
lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload
Affected: through 2.2.13
CVE-2026-23733
6.4
0%
Jan 18
Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE)
Affected: < 2.0.0-next.180
CVE-2025-59417
6.1
0%
Sep 18
Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages
Affected: < 1.129.4
CVE-2026-23835
5.7
0%
Jan 30
LobeHub Vulnerable to Improper Authorization in Presigned Upload
Affected: < 1.143.3
CVE-2024-37895
5.7
1%
Jun 17
API Key Leak in lobe-chat
Affected: < 0.162.25
CVE-2024-24566
5.3
0%
Jan 31
Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system
Affected: before 0.122.4
CVE-2025-59426
4.3
0%
Sep 25
lobe-chat has an Open Redirect
Affected: < 1.130.1
CVE-2026-23522
3.7
0%
Jan 19
Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion
Affected: < 2.0.0-next.193
CVE-2025-62505
3.0
0%
Oct 17
SSRF in lobehub/lobe-chat with native web fetch module
Affected: < 1.136.2
Showing 12