Threats affecting pkg:github/lobehub

CVE-2026-59100 is a broken object level authorization vulnerability in LobeChat through version 2.2.9. It allows authenticated attackers to access and modify chat-group agent data of other users by supplying arbitrary group identifiers. Attackers can perform operations such as getGroupAgents, updateAgentInGroup, and removeAgentsFromGroup without proper user-scoped checks, enabling unauthorized reading, modification, and removal of agents in other users' chat groups.

LobeChat versions up to 2.2.9 have an authorization bypass vulnerability in the semantic search feature. Authenticated attackers can exploit missing user-identifier checks to access other users' data, including text content, file names, and metadata. This occurs through manipulation of victim file or knowledge-base identifiers in the chunk retrieval and chat knowledge-base paths.

LobeChat versions before 2.2.10-canary.18 contain a server-side request forgery (SSRF) vulnerability. Authenticated attackers can exploit this flaw by supplying crafted URLs to the skill import and topic cover update endpoints, which do not use the project's SSRF-safe fetch wrapper. This allows attackers to make internal HTTP requests to arbitrary URLs, including sensitive internal services such as cloud instance metadata endpoints, potentially disclosing internal service responses and cloud credentials.

LobeChat versions before 2.2.10-canary.15 contain a regular expression denial of service (ReDoS) vulnerability. Authenticated attackers can supply a malicious GitHub repository URL path with catastrophic-backtracking regex patterns during skill import. This causes synchronous execution of a complex regex in the findSkillMd function, blocking the Node.js event loop and denying service to all users for tens of seconds per request. The issue is fixed in version 2.2.10-canary.15.