Threat Intelligence Database

LobeChat server-database deployments through version 2.2.9 have a broken object-level authorization vulnerability in the MessageModel. Several update methods filter target rows only by message ID without verifying the user ID, allowing an authenticated user who knows another user's message identifier to overwrite that user's plugin-related metadata and records. This tampered content is then served back to the victim. Exploitation requires knowledge of the victim's non-enumerable message identifier.

LobeChat versions before 2.2.10-canary.18 have a server-side request forgery (SSRF) vulnerability. Authenticated attackers can exploit this by supplying crafted input to the skill import and topic cover update endpoints, which use an unprotected global fetch call. This allows attackers to make internal HTTP requests to arbitrary URLs, including sensitive internal services like cloud instance metadata endpoints, potentially exposing internal responses and cloud credentials.