LO
Product
lobe-chat
by lobehub · last CVE Aug 10, 2026
12
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 6Low 2
Watch

Add lobe-chat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23522
3.7
0%
Jan 19
Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion
Affected: < 2.0.0-next.193
CVE-2025-62505
3.0
0%
Oct 17
SSRF in lobehub/lobe-chat with native web fetch module
Affected: < 1.136.2
Showing 2