Skip to contentLobehub Lobe Chat vulnerabilities
- lobehub lobe-chat, lobe chat +1 morelobe-chat has an Open RedirectCVE-2025-59426Fix available4.3 Medium
- lobehub lobe-chat, lobe chat +1 moreLobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat MessagesCVE-2025-59417Fix available6.8 Medium
- lobehub lobe-chat, lobe chat +1 moressrf vulnerability in lobe-chatCVE-2024-32965Fix availableEPSS 26.1%8.1 High
- lobehub lobe chat, lobe-chat +1 moreLobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)CVE-2024-47066Public exploitFix availableEPSS 11.9%9.0 Critical
- lobehub lobe-chat, lobe chat +1 moreAPI Key Leak in lobe-chatCVE-2024-37895Fix available5.7 Medium
- lobehub lobe-chat, lobe chat +1 morelobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerabilityCVE-2024-32964Fix availableEPSS 53.0%9.0 Critical
- lobehub lobe chat, lobe-chat +1 moreLobe Chat unauthorized access to pluginsCVE-2024-24566Fix available5.3 Medium