The vulnerability in LobeChat prior to version 2.2.10-canary.18 is a server-side request forgery (CWE-918) that arises because the skill import service (importFromUrl) and topic cover update (fetchImageFromUrl) endpoints use the global fetch function without the project's SSRF-safe-fetch wrapper. This flaw enables authenticated attackers to direct internal HTTP requests to arbitrary URLs, including internal cloud metadata endpoints, thereby disclosing internal service responses and cloud credentials. No patch or official fix information is provided in the available data.

Exploitation of this SSRF vulnerability can lead to unauthorized disclosure of internal service responses and cloud credentials by allowing attackers to access internal HTTP endpoints that are normally inaccessible externally. This can compromise the confidentiality of sensitive information within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected endpoints to trusted users only and monitor for suspicious activity related to the skill import and topic cover update features. Avoid exposing internal metadata endpoints to the application if possible.