CVE-2024-32965

Lobe Chat is an open-source, AI chat framework. Versions of lobe-chat prior to 1.19.13 have an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. The jwt token header X-Lobe-Chat-Auth strored proxy address and OpenAI API Key, can be modified to scan an internal network in the target lobe-web environment. This issue has been addressed in release version 1.19.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-918

• https://github.com/lobehub/lobe-chat/commit/e960a23b0c69a5762eb27d776d33dac443058fafPatch
• https://github.com/lobehub/lobe-chat/security/advisories/GHSA-2xcc-vm3f-m8rwExploit, Vendor Advisory

Published

Nov 26, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3296A timing-based side-channel flaw exists in the rust-openssl …5.9
• CVE-2024-32960Improper Privilege Management vulnerability in Booking Ultra…8.8
• CVE-2024-32961Improper Neutralization of Input During Web Page Generation …5.4
• CVE-2024-32962xml-crypto is an xml digital signature and encryption librar…10
• CVE-2024-32963Navidrome is an open source web-based music collection serve…4.2
• CVE-2024-32964Lobe Chat is a chatbot framework that supports speech synthe…9
• CVE-2024-32966Static Web Server (SWS) is a tiny and fast production-ready …5.8
• CVE-2024-32967Zitadel is an open source identity management system. In cas…5.3
• CVE-2024-32969vantage6 is an open-source infrastructure for privacy preser…2.7
• CVE-2024-3297An issue in the Certificate Authenticated Session Establishm…6.5
• CVE-2024-32970Phlex is a framework for building object-oriented views in R…7.1
• CVE-2024-32971Apollo Router is a configurable, graph router written in Rus…9