Description
The file upload feature in Knowledge Base > File Upload does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitrary files in abnormal or unintended paths. In addition, since lobechat.com relies on the size parameter from the request to calculate file usage, an attacker can manipulate this value to misrepresent the actual file size, such as uploading a 1 GB file while reporting it as 10 MB, or falsely declaring a 10 MB file as a 1 GB file.
Recommendation
Update the @lobehub/chat package to the latest compatible version. Followings are version details:
- Affected version(s): < 1.143.3
- Patched version(s): 1.143.3
References
Could your website be exposed too?
SmartScanner can check your website for LobeHub Vulnerable to Improper Authorization in Presigned Upload and gives you actionable findings to investigate.
Start a free scanRelated Issues
- EverShop vulnerable to improper authorization in GraphQL endpoints - CVE-2023-46942
- @lobehub/chat vulnerable to unauthorized access to plugins - CVE-2024-24566
- yaml is vulnerable to Stack Overflow via deeply nested YAML collections - CVE-2026-33532
- Mermaid: Improper sanitization of configuration leads to CSS injection - CVE-2026-41159
