Read the docs
TI-2026-83681 Aliases CVE-2026-120315GHSA-7925-2fm7-xg83

Path traversal in LobeHub Chat lets users write arbitrary files

Priority HIGH 73CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal flaw (CWE-22) in writeTempFile() because it does not sanitize file names. An authenticated user with low privileges can write arbitrary files over the network, including application files such as startServer.js, which can lead to code execution or denial of service.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

Description from the CNA

LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile(). Attackers can create a file record via file.createFile with a traversal name, then trigger document parsing to overwrite application files like startServer.js for code execution or denial of service.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00436 38th percentileScored 2026-11-07
Fix Fixed chat (lobehub): 2.1.49

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
lobehubchat1.84.26 to before 2.1.492.1.49Patch availableCNA
  • chat Vendorlobehub Affected 1.84.26 to before 2.1.49 Fixed in 2.1.49 Patch available CNA

Remediation

Update LobeHub Chat to version 2.1.49, the version that fixes this flaw.

Written with Claude Haiku 5.5 from the sources below · 2026-11-06

  • Fix · CNA chat (lobehub) Fixed in 2.1.49

Timeline

  1. 2026-11-02 Threatist record created from CVE-2026-120315
  2. 2026-11-02 Alias added: GHSA-7925-2fm7-xg83
  3. 2026-11-04 Priority changed: MEDIUM → LOW
  4. 2026-11-06 CISA SSVC decision points changed
  5. 2026-11-06 Priority changed: LOW → HIGH

References

Advisory 1

  • TI-2026-39067 LobeHub: Unauthenticated SSRF in `/webapi/proxy` CVSS 3.1CRITICAL 9.0
  • TI-2024-31448 Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964) CVSS 3.1CRITICAL 9.0
  • TI-2024-21831 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability CVSS 3.1CRITICAL 9.0
  • TI-2026-58746 LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu CVSS 4.0MEDIUM 6.9
  • TI-2024-21832 ssrf vulnerability in lobe-chat CVSS 3.1HIGH 8.6
  • TI-2026-42275 LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl CVSS 4.0HIGH 8.3
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences