CVE Tools
Track your stack

Lobehub

1 CVEs tracked since 2026. Since Nov 2026, none of them reached CISA KEV.

Lobehub CVEs per month

Nov 2026 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Lobehub CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2026-1110

Products

The products that kept showing up in Lobehub's monthly top three, with their CVEs summed over those months.

  1. Chat11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Lobehub.

  1. CVE-2026-120315LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile8.8
  2. CVE-2026-85621LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu6.5
  3. CVE-2026-72594lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload7.6
  4. CVE-2026-59100LobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent Operations5.0
  5. CVE-2026-59098LobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic Search6.5
  6. CVE-2026-59095LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl7.7
  7. CVE-2026-58580LobeChat 2.2.9 - Broken Object-Level Authorization in Message Sub-Resource Writes5.9
  8. CVE-2026-58578LobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill Import6.5
  9. CVE-2026-54157LobeHub: Unauthenticated SSRF in `/webapi/proxy`9.0
  10. CVE-2026-42045LobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)6.2
  11. CVE-2026-39411LobeHub has an unauthenticated authentication bypass on `webapi` routes via forgeable `X-lobe-chat-auth` header5.0
  12. CVE-2026-23835LobeHub Vulnerable to Improper Authorization in Presigned Upload—
  13. CVE-2026-23522Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion3.7
  14. CVE-2026-23733Lobe Chat has Cross-Site Scripting (XSS) issue that may escalate to Remote Code Execution (RCE)6.4
  15. CVE-2025-62505SSRF in lobehub/lobe-chat with native web fetch module3.0

The record

Peak rank
#25 in Nov 2026
Busiest month shown
Nov 2026, 1 CVEs
Months with a KEV entry
0 since Nov 2026
Monthly snapshots
1 since 2026
Lobehub's full record, month by month