Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL to their own attack URL on the frontend and setting up a server-side request. This issue has been addressed in version 0.162.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.

According to the self-reported version in its response header, the version of LobeChat hosted on the remote web server is prior to 0.162.25. It is, therefore, affected by a Sensitive Data Exposure through SSO/Access Code.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully
    authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL
    to their own attack URL on the frontend and setting up a server-side request. This issue has been
    addressed in version 0.162.25. Users are advised to upgrade. There are no known workarounds for this
    vulnerability. (CVE-2024-37895)

ID	Name	Product	Family	Type	Severity
114587	LobeChat < 0.162.25 Sensitive Data Exposure	Web App Scanning	Artificial Intelligence	Version Based	medium
417245	SCA: security update for @lobehub/chat (GHSA-p36r-qxgx-jq2v)	Tenable Cloud Security	SCA Checks	Local	medium
417245	SCA: security update for @lobehub/chat (GHSA-p36r-qxgx-jq2v)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2024-37895

medium

Tenable Plugins

medium

medium

medium