Read the docs

lobehub

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9

Exploited now

lobehub records in CISA KEV

No lobehub vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lobe Chat 7 records HIGH Lobehub 1 record MEDIUM

Records

7 records in Lobe Chat · all components

TI-2024-21832 CVE-2024-32965 · GHSA-2xcc-vm3f-m8rw

ssrf vulnerability in lobe-chat

Priority HIGH 70

Lobe Chat is an open-source, AI chat framework.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.26131 Published 2024-11-26 Fixed in 1.19.13 CWE-918
TI-2025-36978 CVE-2025-59426 · GHSA-xph5-278p-26qx

lobe-chat has an Open Redirect

Priority MEDIUM 53

Lobe Chat is an open-source artificial intelligence chat framework.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00351 Published 2025-09-25 Fixed in 1.130.1 CWE-601
TI-2024-16187 CVE-2024-24566 · GHSA-pf55-fj96-xf37

Lobe Chat unauthorized access to plugins

Priority LOW 31

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2024-01-31 Fixed in 0.122.4 CWE-284
TI-2024-25211 CVE-2024-37895 · GHSA-p36r-qxgx-jq2v

API Key Leak in lobe-chat

Priority LOW 26

Lobe Chat is an open-source LLMs/AI chat framework.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00546 Published 2024-06-17 Fixed in 0.162.25 CWE-200
Open these records in search →