PT-2025-38409 · Lobe Chat · Lobe Chat

Jackfromeast · Published 2025-09-18 · Updated 2025-09-18 · CVE-2025-59417

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:N/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Lobe Chat versions prior to 1.129.4

Description Lobe Chat, an open-source artificial intelligence chat framework, contains a cross-site scripting (XSS) issue in how it handles chat messages. Specifically, when a server response includes a lobeArtifact of type image/svg+xml, the application renders it using dangerouslySetInnerHTML, which can lead to XSS attacks. Parties capable of injecting content into chat messages – including malicious pages, compromised MCP servers, or tool integrations – can exploit this issue. This can potentially escalate to remote code execution on the user’s machine.

Recommendations Update Lobe Chat to version 1.129.4 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-59417

GHSA-M79R-R765-5F9J

Affected Products

Lobe Chat

References · 13

• 🔥 https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/59xxx/CVE-2025-59417.json · Exploit
• https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c · Patch
• https://osv.dev/vulnerability/GHSA-m79r-r765-5f9j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59417 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59417 · Vendor Advisory
• https://github.com/lobehub/lobe-chat · Note
• https://github.com/lobehub/lobe-chat/blob/0a1dcf943ea294e35acbe57d07f7974efede8e2e/src/features/Portal/Artifacts/Body/Renderer/index.tsx#L10-L32 · Note
• https://github.com/lobehub/lobe-chat/blob/0a1dcf943ea294e35acbe57d07f7974efede8e2e/src/features/Conversation/components/MarkdownElements/LobeArtifact/index.ts#L7-L11 · Note
• https://github.com/lobehub/lobe-chat/blob/0a1dcf943ea294e35acbe57d07f7974efede8e2e/src/features/Portal/Artifacts/Body/Renderer/SVG.tsx#L67-L79 · Note
• https://github.com/lobehub/lobe-chat/blob/0a1dcf943ea294e35acbe57d07f7974efede8e2e/src/features/Conversation/components/MarkdownElements/LobeArtifact/rehypePlugin.ts#L50-L68 · Note
• https://github.com/lobehub/lobe-chat/blob/0a1dcf943ea294e35acbe57d07f7974efede8e2e/apps/desktop/src/main/controllers/SystemCtr.ts#L65-L68 · Note
• https://twitter.com/CVEnew/status/1968718088398061627 · Twitter Post