CVE-2026-23522

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23522", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-13T18:22:43.980Z", "datePublished": "2026-01-19T16:53:32.371Z", "dateUpdated": "2026-01-20T21:35:39.441Z"}, "containers": {"cna": {"title": "Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-639", "lang": "en", "description": "CWE-639: Authorization Bypass Through User-Controlled Key", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-862", "lang": "en", "description": "CWE-862: Missing Authorization", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-915", "lang": "en", "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-j7xp-4mg9-x28r", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-j7xp-4mg9-x28r"}, {"name": "https://github.com/lobehub/lobe-chat/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6", "tags": ["x_refsource_MISC"], "url": "https://github.com/lobehub/lobe-chat/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6"}], "affected": [{"vendor": "lobehub", "product": "lobe-chat", "versions": [{"version": "< 2.0.0-next.193", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-19T16:53:32.371Z"}, "descriptions": [{"lang": "en", "value": "LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out, so it's enabling attackers to delete other users' KB files if they know the knowledge base ID and file ID. While the vulnerability is confirmed, practical exploitation requires knowing target's KB ID and target's file ID. These IDs are random and not easily enumerable. However, IDs may leak through shared links, logs, referrer headers and so on. Missing authorization check is a critical security flaw regardless. Users should upgrade to version 2.0.0-next.193 to receive a patch."}], "source": {"advisory": "GHSA-j7xp-4mg9-x28r", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-20T21:35:33.327391Z", "id": "CVE-2026-23522", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-20T21:35:39.441Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23522", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-20T21:35:33.327391Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-20T21:35:36.908Z"}}], "cna": {"title": "Lobe Chat has IDOR in Knowledge Base File Removal that Allows Cross User File Deletion", "source": {"advisory": "GHSA-j7xp-4mg9-x28r", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "lobehub", "product": "lobe-chat", "versions": [{"status": "affected", "version": "< 2.0.0-next.193"}]}], "references": [{"url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-j7xp-4mg9-x28r", "name": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-j7xp-4mg9-x28r", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/lobehub/lobe-chat/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6", "name": "https://github.com/lobehub/lobe-chat/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out, so it's enabling attackers to delete other users' KB files if they know the knowledge base ID and file ID. While the vulnerability is confirmed, practical exploitation requires knowing target's KB ID and target's file ID. These IDs are random and not easily enumerable. However, IDs may leak through shared links, logs, referrer headers and so on. Missing authorization check is a critical security flaw regardless. Users should upgrade to version 2.0.0-next.193 to receive a patch."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-639", "description": "CWE-639: Authorization Bypass Through User-Controlled Key"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862: Missing Authorization"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-915", "description": "CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-19T16:53:32.371Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23522", "state": "PUBLISHED", "dateUpdated": "2026-01-20T21:35:39.441Z", "dateReserved": "2026-01-13T18:22:43.980Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-19T16:53:32.371Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "lobe-chat", "vendor": "lobehub", "versions": [{"status": "affected", "version": "< 2.0.0-next.193"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out, so it's enabling attackers to delete other users' KB files if they know the knowledge base ID and file ID. While the vulnerability is confirmed, practical exploitation requires knowing target's KB ID and target's file ID. These IDs are random and not easily enumerable. However, IDs may leak through shared links, logs, referrer headers and so on. Missing authorization check is a critical security flaw regardless. Users should upgrade to version 2.0.0-next.193 to receive a patch."}, {"lang": "es", "value": "LobeChat es una plataforma de aplicaci\u00f3n de chat de c\u00f3digo abierto. Antes de la versi\u00f3n 2.0.0-next.193, el endpoint tRPC 'knowledgeBase.removeFilesFromKnowledgeBase' permite a los usuarios autenticados eliminar archivos de cualquier base de conocimiento sin verificar la propiedad. El filtro 'userId' en la consulta de la base de datos est\u00e1 comentado, lo que permite a los atacantes eliminar archivos de KB de otros usuarios si conocen el ID de la base de conocimiento y el ID del archivo. Aunque la vulnerabilidad est\u00e1 confirmada, la explotaci\u00f3n pr\u00e1ctica requiere conocer el ID de KB del objetivo y el ID del archivo del objetivo. Estos ID son aleatorios y no son f\u00e1cilmente enumerables. Sin embargo, los ID pueden filtrarse a trav\u00e9s de enlaces compartidos, registros, encabezados de referencia y dem\u00e1s. La falta de verificaci\u00f3n de autorizaci\u00f3n es una falla de seguridad cr\u00edtica de todos modos. Los usuarios deben actualizar a la versi\u00f3n 2.0.0-next.193 para recibir un parche."}], "id": "CVE-2026-23522", "lastModified": "2026-06-17T10:21:43.300", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.7, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23522", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-20T21:35:33.327391Z", "version": "2.0.3"}}]}, "published": "2026-01-19T17:15:50.590", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/lobehub/lobe-chat/commit/2c1762b85acb84467ed5e799afe1499cd2f912e6"}, {"source": "security-advisories@github.com", "url": "https://github.com/lobehub/lobe-chat/security/advisories/GHSA-j7xp-4mg9-x28r"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-639"}, {"lang": "en", "value": "CWE-862"}, {"lang": "en", "value": "CWE-915"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T05:10:49.371790+00:00", "value": {"mitigation_remediation": ["Upgrade LobeChat to version 2.0.0\u2011next.193 or later, which restores ownership validation during file deletion.", "Audit the removal endpoint in your deployment to ensure that the user\u2011ID filter is active and that the database query verifies the requester own the knowledge base and file.", "Review logs and shared links for inadvertent exposure of knowledge\u2011base IDs or file IDs, and rotate or obfuscate identifiers if they are being exposed."], "summary": {"action": "Patch Now", "impact": "Unauthorized deletion of knowledge base files"}, "threat_synthesis": {"affected_systems": "The issue affects LobeChat versions prior to 2.0.0\u2011next.193, as supplied by the vendor lobehub. Users running any earlier release of this open\u2011source chat application platform are at risk because the IDOR exists in the mentioned endpoint.", "description_and_impact": "The vulnerability exists in LobeChat\u2019s Knowledge Base file removal endpoint, which is a tRPC method that lets authenticated users delete files from knowledge bases. The backend query lacks an ownership check because the user\u2011ID filter is commented out. Without this check, an attacker can delete any file in any knowledge base as long as they supply a valid knowledge\u2011base ID and file ID. The data loss is not limited to a single user; the attacker can wipe or modify other users\u2019 knowledge base contents, impacting confidentiality and integrity of user data. The vulnerability is classified under CWE-284 (Improper Access Control), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-862 (Missing Authorization in Resource Access Control), and CWE-915 (Privilege Existence Error), underscoring that it is an access\u2011control flaw that permits unauthorised deletion.", "risk_and_exploitability": "The CVSS score is 3.7, indicating moderate severity, while the EPSS score is less than 1%, meaning current exploitation probability is very low. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. Practically, exploitation requires knowledge of the target knowledge\u2011base ID and file ID. These IDs are randomly generated and not easily enumerated, but may leak through shared links, logs, or referrer headers. Even with low likelihood, the missing authorization check makes this a critical security flaw because it allows any authenticated user to delete another user\u2019s files if the identifiers are known."}}}}, "created": "2026-01-20T08:40:58.057662+00:00", "updated": "2026-04-18T05:15:15.982556+00:00", "vendors": ["lobehub", "lobehub$PRODUCT$lobe_chat"]}