VendorsLobeHublobe_chatany version
Vulnerabilities

LobeHub Lobe Chat any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

7CVEs
CVE-2024-32964
lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
Published 2024-05-10 · Analyzed
9.0EPSS 0.530
CVE-2024-47066
Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
Published 2024-09-23 · Analyzed
9.0EPSS 0.118
CVE-2024-32965
ssrf vulnerability in lobe-chat
Published 2024-11-26 · Analyzed
8.6EPSS 0.279
CVE-2025-59417
Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages
Published 2025-09-18 · Analyzed
6.8EPSS 0.004
CVE-2024-37895
API Key Leak in lobe-chat
Published 2024-06-17 · Analyzed
5.7EPSS 0.005
CVE-2024-24566
Lobe Chat unauthorized access to plugins
Published 2024-01-31 · Modified
5.3EPSS 0.005
CVE-2025-59426
lobe-chat has an Open Redirect
Published 2025-09-25 · Analyzed
4.3EPSS 0.003