Read the docs
TI-2024-21832 Aliases CVE-2024-32965GHSA-2xcc-vm3f-m8rw

ssrf vulnerability in lobe-chat

Priority HIGH 70CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · Low · Low
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

Lobe Chat is an open-source, AI chat framework. Versions of lobe-chat prior to 1.19.13 have an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. The jwt token header X-Lobe-Chat-Auth strored proxy address and OpenAI API Key, can be modified to scan an internal network in the target lobe-web environment. This issue has been addressed in release version 1.19.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.26131 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed lobe-chat (lobehub): 1.19.13@lobehub/chat (npm): 1.19.13

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
lobehublobe-chatbefore 1.19.131.19.13Patch availableCNA
—@lobehub/chat (npm)before 1.19.131.19.13Patch availableGHSA-2xcc-vm3f-m8rw
  • lobe-chat Vendorlobehub Affected before 1.19.13 Fixed in 1.19.13 Patch available CNA
  • @lobehub/chat (npm) Vendor— Affected before 1.19.13 Fixed in 1.19.13 Patch available GHSA-2xcc-vm3f-m8rw

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lobehub:lobe_chat:*:*:*:*:*:*:*:*before 1.19.13Vulnerablelobehub
  • cpe:2.3:a:lobehub:lobe_chat:*:*:*:*:*:*:*:* Versions before 1.19.13 Vulnerable ·lobehub

Remediation

  • Fix · CNA lobe-chat (lobehub) Fixed in 1.19.13
  • Fix · GHSA-2xcc-vm3f-m8rw @lobehub/chat (npm) Fixed in 1.19.13 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-32965
  2. 2026-10-03 Alias added: GHSA-2xcc-vm3f-m8rw

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2024-31448 Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964) CVSS 3.1CRITICAL 9.0
  • TI-2024-21831 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability CVSS 3.1CRITICAL 9.0
  • TI-2025-36970 Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages CVSS 4.0MEDIUM 6.8
  • TI-2025-36978 lobe-chat has an Open Redirect CVSS 3.1MEDIUM 4.3
  • TI-2024-16187 Lobe Chat unauthorized access to plugins CVSS 3.1MEDIUM 5.3
  • TI-2024-25211 API Key Leak in lobe-chat CVSS 3.1MEDIUM 5.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences