TI-2026-18946 Aliases CVE-2026-23522 GHSA-j7xp-4mg9-x28r

Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion

MEDIUM 51CWE-284Published 2026-01-19 · Updated 2026-01-20

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Security bypass, Tampering
Confidentiality · integrity · availability: None · Low · None
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-284 and CWE-915.

Summary

LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out, so it's enabling attackers to delete other users' KB files if they know the knowledge base ID and file ID. While the vulnerability is confirmed, practical exploitation requires knowing target's KB ID and target's file ID. These IDs are random and not easily enumerable. However, IDs may leak through shared links, logs, referrer headers and so on. Missing authorization check is a critical security flaw regardless. Users should upgrade to version 2.0.0-next.193 to receive a patch.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00235 14th percentileScored 2026-11-07

Fix Fixed lobe-chat (lobehub): 2.0.0-next.193

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
lobehub	lobe-chat	before 2.0.0-next.193	2.0.0-next.193	Patch available	CNA
—	@lobehub/chat (npm)	up to 1.143.2	—	No fix listed	GHSA-j7xp-4mg9-x28r

lobe-chat Vendorlobehub Affected before 2.0.0-next.193 Fixed in 2.0.0-next.193 Patch available CNA
@lobehub/chat (npm) Vendor— Affected up to 1.143.2 Fixed in — No fix listed GHSA-j7xp-4mg9-x28r

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPE	Versions	Role	Vendor
cpe:2.3:a:lobehub:lobe_chat::::::::	—	—	lobehub

cpe:2.3:a:lobehub:lobe_chat:*:*:*:*:*:*:*:* Versions — — ·lobehub

Remediation

Fix · CNA lobe-chat (lobehub) Fixed in 2.0.0-next.193

Timeline

2026-10-02 Threatist record created from CVE-2026-23522
2026-10-03 Alias added: GHSA-j7xp-4mg9-x28r

References

Advisory 1

https://nvd.nist.gov/vuln/detail/CVE-2026-23522

Other 3

TI-2026-39067 LobeHub: Unauthenticated SSRF in `/webapi/proxy` CVSS 3.1CRITICAL 9.0
TI-2026-83681 Path traversal in LobeHub Chat lets users write arbitrary files CVSS 4.0HIGH 8.7
TI-2024-31448 Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964) CVSS 3.1CRITICAL 9.0
TI-2024-21831 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability CVSS 3.1CRITICAL 9.0
TI-2026-58746 LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu CVSS 4.0MEDIUM 6.9
TI-2024-21832 ssrf vulnerability in lobe-chat CVSS 3.1HIGH 8.6

See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences