Vulnerabilities

TI-2025-36978 CVE-2025-59426 · GHSA-xph5-278p-26qx

lobe-chat has an Open Redirect

MEDIUM 53

Lobe Chat is an open-source artificial intelligence chat framework.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00351 Published 2025-09-25 Fixed in 1.130.1 CWE-601

TI-2025-36970 CVE-2025-59417 · GHSA-m79r-r765-5f9j

HIGH 65

Lobe Chat is an open-source artificial intelligence chat framework.

CVSS 4.0MEDIUM 6.8 Network No auth User interaction EPSS 0.00432 Published 2025-09-18 Fixed in 1.129.4 CWE-79

TI-2024-21832 CVE-2024-32965 · GHSA-2xcc-vm3f-m8rw

HIGH 70

Lobe Chat is an open-source, AI chat framework.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.26131 Published 2024-11-26 Fixed in 1.19.13 CWE-918

TI-2024-31448 CVE-2024-47066 · GHSA-3fc8-2r3f-8wrg

HIGH 72

Lobe Chat is an open-source artificial intelligence chat framework.

CVSS 3.1CRITICAL 9.0 Network High privileges No interaction EPSS 0.1186 Published 2024-09-23 Fixed in 1.19.13 CWE-918

TI-2024-25211 CVE-2024-37895 · GHSA-p36r-qxgx-jq2v

LOW 26

Lobe Chat is an open-source LLMs/AI chat framework.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00546 Published 2024-06-17 Fixed in 0.162.25 CWE-200

TI-2024-21831 CVE-2024-32964 · GHSA-mxhq-xw3g-rphc

HIGH 72

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system.

CVSS 3.1CRITICAL 9.0 Network High privileges No interaction EPSS 0.52964 Published 2024-05-10 Fixed in 0.150.6 CWE-918

TI-2024-16187 CVE-2024-24566 · GHSA-pf55-fj96-xf37

LOW 31

Lobe Chat is a chatbot framework that supports speech synthesis, multimodal, and extensible Function Call plugin system.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00482 Published 2024-01-31 Fixed in 0.122.4 CWE-284