https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 10:31:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-5941 EUVD-2026-5941 https://cve.radiocsirt.org/vuln/euvd-2026-5941 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37895 <p>Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL to their own attack URL on the frontend and setting up a server-side request. This issue has been addressed in version 0.162.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> <p>Lobe Chat is an open-source LLMs/AI chat framework. In affected versions if an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL to their own attack URL on the frontend and setting up a server-side request. This issue has been addressed in version 0.162.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-37895 https://cve.radiocsirt.org/vuln/ghsa-p36r-qxgx-jq2v <p><strong>Affected:</strong> npm: @lobehub/chat</p> <p>### Summary</p> <p>If an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL to their own attack URL on the frontend and setting up a server-side request.</p> <p>### Details</p> <p>The attack process is described above.</p> <p></p> <p>### PoC</p> <p>Frontend: 1. Pass basic authentication (SSO/Access Code). 2. Set the Base URL to a private attack address. 3. Configure the request method to be a server-side request. 4. At the self-set attack address, retrieve the API Key information from the request headers.</p> <p>Backend: 1. The LobeChat version allows setting the Base URL. 2. There is no outbound traffic whitelist.</p> <p>### Impact</p> <p>All community version LobeChat users using SSO/Access Code authentication, tested on version 0.162.13.</p> <p><strong>Affected:</strong> npm: @lobehub/chat</p> <p>### Summary</p> <p>If an attacker can successfully authenticate through SSO/Access Code, they can obtain the real backend API Key by modifying the base URL to their own attack URL on the frontend and setting up a server-side request.</p> <p>### Details</p> <p>The attack process is described above.</p> <p></p> <p>### PoC</p> <p>Frontend: 1. Pass basic authentication (SSO/Access Code). 2. Set the Base URL to a private attack address. 3. Configure the request method to be a server-side request. 4. At the self-set attack address, retrieve the API Key information from the request headers.</p> <p>Backend: 1. The LobeChat version allows setting the Base URL. 2. There is no outbound traffic whitelist.</p> <p>### Impact</p> <p>All community version LobeChat users using SSO/Access Code authentication, tested on version 0.162.13.</p> https://cve.radiocsirt.org/vuln/ghsa-p36r-qxgx-jq2v