CVE-2026-23835

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-23835", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-01-16T15:46:40.841Z", "datePublished": "2026-01-30T20:04:23.284Z", "dateUpdated": "2026-01-30T20:21:57.205Z"}, "containers": {"cna": {"title": "LobeHub Vulnerable to Improper Authorization in Presigned Upload", "problemTypes": [{"descriptions": [{"cweId": "CWE-73", "lang": "en", "description": "CWE-73: External Control of File Name or Path", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 5.7, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P", "version": "4.0"}}], "references": [{"name": "https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5"}], "affected": [{"vendor": "lobehub", "product": "lobe-chat", "versions": [{"version": "< 1.143.3", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-30T20:04:23.284Z"}, "descriptions": [{"lang": "en", "value": "LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Base > File Upload` does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitrary files in abnormal or unintended paths. In addition, since `lobechat.com` relies on the size parameter from the request to calculate file usage, an attacker can manipulate this value to misrepresent the actual file size, such as uploading a `1 GB` file while reporting it as `10 MB`, or falsely declaring a `10 MB` file as a `1 GB` file. By manipulating the size value provided in the client upload request, it is possible to bypass the monthly upload quota enforced by the server and continuously upload files beyond the intended storage and traffic limits. This abuse can result in a discrepancy between actual resource consumption and billing calculations, causing direct financial impact to the service operator. Additionally, exhaustion of storage or related resources may lead to degraded service availability, including failed uploads, delayed content delivery, or temporary suspension of upload functionality for legitimate users. A single malicious user can also negatively affect other users or projects sharing the same subscription plan, effectively causing an indirect denial of service (DoS). Furthermore, excessive and unaccounted-for uploads can distort monitoring metrics and overload downstream systems such as backup processes, malware scanning, and media processing pipelines, ultimately undermining overall operational stability and service reliability. Version 1.143.3 contains a patch for the issue."}], "source": {"advisory": "GHSA-wrrr-8jcv-wjf5", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-01-30T20:21:13.600703Z", "id": "CVE-2026-23835", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-30T20:21:57.205Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-23835", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-30T20:21:13.600703Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-01-30T20:21:32.624Z"}}], "cna": {"title": "LobeHub Vulnerable to Improper Authorization in Presigned Upload", "source": {"advisory": "GHSA-wrrr-8jcv-wjf5", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.7, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "lobehub", "product": "lobe-chat", "versions": [{"status": "affected", "version": "< 1.143.3"}]}], "references": [{"url": "https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5", "name": "https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Base > File Upload` does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitrary files in abnormal or unintended paths. In addition, since `lobechat.com` relies on the size parameter from the request to calculate file usage, an attacker can manipulate this value to misrepresent the actual file size, such as uploading a `1 GB` file while reporting it as `10 MB`, or falsely declaring a `10 MB` file as a `1 GB` file. By manipulating the size value provided in the client upload request, it is possible to bypass the monthly upload quota enforced by the server and continuously upload files beyond the intended storage and traffic limits. This abuse can result in a discrepancy between actual resource consumption and billing calculations, causing direct financial impact to the service operator. Additionally, exhaustion of storage or related resources may lead to degraded service availability, including failed uploads, delayed content delivery, or temporary suspension of upload functionality for legitimate users. A single malicious user can also negatively affect other users or projects sharing the same subscription plan, effectively causing an indirect denial of service (DoS). Furthermore, excessive and unaccounted-for uploads can distort monitoring metrics and overload downstream systems such as backup processes, malware scanning, and media processing pipelines, ultimately undermining overall operational stability and service reliability. Version 1.143.3 contains a patch for the issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-01-30T20:04:23.284Z"}}}, "cveMetadata": {"cveId": "CVE-2026-23835", "state": "PUBLISHED", "dateUpdated": "2026-01-30T20:21:57.205Z", "dateReserved": "2026-01-16T15:46:40.841Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-01-30T20:04:23.284Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "lobe-chat", "vendor": "lobehub", "versions": [{"status": "affected", "version": "< 1.143.3"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "LobeHub is an open source human-and-AI-agent network. Prior to version 1.143.3, the file upload feature in `Knowledge Base > File Upload` does not validate the integrity of the upload request, allowing users to intercept and modify the request parameters. As a result, it is possible to create arbitrary files in abnormal or unintended paths. In addition, since `lobechat.com` relies on the size parameter from the request to calculate file usage, an attacker can manipulate this value to misrepresent the actual file size, such as uploading a `1 GB` file while reporting it as `10 MB`, or falsely declaring a `10 MB` file as a `1 GB` file. By manipulating the size value provided in the client upload request, it is possible to bypass the monthly upload quota enforced by the server and continuously upload files beyond the intended storage and traffic limits. This abuse can result in a discrepancy between actual resource consumption and billing calculations, causing direct financial impact to the service operator. Additionally, exhaustion of storage or related resources may lead to degraded service availability, including failed uploads, delayed content delivery, or temporary suspension of upload functionality for legitimate users. A single malicious user can also negatively affect other users or projects sharing the same subscription plan, effectively causing an indirect denial of service (DoS). Furthermore, excessive and unaccounted-for uploads can distort monitoring metrics and overload downstream systems such as backup processes, malware scanning, and media processing pipelines, ultimately undermining overall operational stability and service reliability. Version 1.143.3 contains a patch for the issue."}, {"lang": "es", "value": "LobeHub es una red de agentes humanos y de IA de c\u00f3digo abierto. Antes de la versi\u00f3n 1.143.3, la funci\u00f3n de carga de archivos en 'Knowledge Base &gt; File Upload' no valida la integridad de la solicitud de carga, lo que permite a los usuarios interceptar y modificar los par\u00e1metros de la solicitud. Como resultado, es posible crear archivos arbitrarios en rutas anormales o no intencionadas. Adem\u00e1s, dado que 'lobechat.com' se basa en el par\u00e1metro de tama\u00f1o de la solicitud para calcular el uso del archivo, un atacante puede manipular este valor para tergiversar el tama\u00f1o real del archivo, como cargar un archivo de '1 GB' mientras lo reporta como '10 MB', o declarar falsamente un archivo de '10 MB' como un archivo de '1 GB'. Al manipular el valor de tama\u00f1o proporcionado en la solicitud de carga del cliente, es posible eludir la cuota de carga mensual impuesta por el servidor y cargar continuamente archivos m\u00e1s all\u00e1 de los l\u00edmites de almacenamiento y tr\u00e1fico previstos. Este abuso puede resultar en una discrepancia entre el consumo real de recursos y los c\u00e1lculos de facturaci\u00f3n, causando un impacto financiero directo al operador del servicio. Adem\u00e1s, el agotamiento del almacenamiento o de los recursos relacionados puede provocar una disponibilidad degradada del servicio, incluyendo cargas fallidas, entrega de contenido retrasada o suspensi\u00f3n temporal de la funcionalidad de carga para usuarios leg\u00edtimos. Un \u00fanico usuario malicioso tambi\u00e9n puede afectar negativamente a otros usuarios o proyectos que comparten el mismo plan de suscripci\u00f3n, causando efectivamente una denegaci\u00f3n de servicio (DoS) indirecta. Adem\u00e1s, las cargas excesivas y no contabilizadas pueden distorsionar las m\u00e9tricas de monitoreo y sobrecargar los sistemas posteriores, como los procesos de copia de seguridad, el escaneo de malware y las tuber\u00edas de procesamiento de medios, socavando en \u00faltima instancia la estabilidad operativa general y la fiabilidad del servicio. La versi\u00f3n 1.143.3 contiene un parche para el problema."}], "id": "CVE-2026-23835", "lastModified": "2026-06-17T10:22:10.583", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.7, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-23835", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-01-30T20:21:13.600703Z", "version": "2.0.3"}}]}, "published": "2026-01-30T20:16:41.893", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-73"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T14:28:32.659514+00:00", "value": {"mitigation_remediation": ["Upgrade to LobeHub version 1.143.3 or later, which contains a patch for the improper authorization bug.", "Disable or restrict access to the Knowledge Base file upload endpoint until the patch is applied to prevent unauthorized file creation.", "Enforce server\u2011side validation of the upload file path and size, and apply quota checks per project to ensure reported size matches actual data and prevent quota bypass."], "summary": {"action": "Patch", "impact": "Unauthorized file creation and quota bypass leading to financial loss or service availability impact"}, "threat_synthesis": {"affected_systems": "Products from LobeHub (lobehub:lobe-chat) running any version earlier than 1.143.3 are affected. The vulnerability exists in the file upload feature of the Knowledge Base interface.", "description_and_impact": "The vulnerability allows an attacker to control the parameters of a file upload request and create files in arbitrary locations on the server. Because the upload size reported by the client is not validated, an attacker can falsify the file size to bypass monthly usage limits, potentially uploading far larger data than permitted. This can inflate billing figures, exhaust storage, and degrade performance, causing direct financial damage to the operator and offering an indirect denial of service to other users sharing the same subscription plan.", "risk_and_exploitability": "The CVSS score of 5.7 indicates moderate severity; the EPSS score is less than 1%, suggesting a low probability of widespread exploitation. The issue is not listed in the CISA KEV catalog. Exploitability requires that an attacker has access to the upload interface or can intercept traffic to manipulate request parameters. Successful exploitation would enable arbitrary file creation, quota circumvention, and potential service disruption."}}}}, "created": "2026-02-02T09:26:57.415026+00:00", "updated": "2026-04-18T14:30:02.947583+00:00", "vendors": ["lobehub", "lobehub$PRODUCT$lobe_chat"]}