Login Request a demo
LO
Product
lobe-chat
by lobehub · last CVE Aug 10, 2026
12
CVEs
0
On KEV
9.0
Max CVSS
0
New 30D
Vulnerabilities12In the news0Timeline
Severity mix
Critical 1High 3Medium 6Low 2
Severity
All severities12Critical1High3Medium6Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add lobe-chat to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-23733
6.4
0%
Jan 18
Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE)
Affected: < 2.0.0-next.180
CVE-2025-59417
6.1
0%
Sep 18
Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages
Affected: < 1.129.4
CVE-2026-23835
5.7
0%
Jan 30
LobeHub Vulnerable to Improper Authorization in Presigned Upload
Affected: < 1.143.3
CVE-2024-37895
5.7
1%
Jun 17
API Key Leak in lobe-chat
Affected: < 0.162.25
CVE-2024-24566
5.3
0%
Jan 31
Lobe Chat unauthorized access to plugins
Affected: < 0.122.4
CVE-2025-59426
4.3
0%
Sep 25
lobe-chat has an Open Redirect
Affected: < 1.130.1
Showing 6