PT-2026-55292 · Lobehub · Lobehub

George Chen · Published 2026-07-02 · Updated 2026-07-02 · CVE-2026-58580

NVD

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N

LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibling methods apply, and findMessagePlugin reads back by id alone. Reachable via the corresponding tRPC message procedures, an authenticated user who knows another user's message identifier can overwrite that victim's plugin tool-call metadata, plugin state/error, text-to-speech and translation records on the same instance, and the tampered content is served back to the victim. Exploitation requires knowledge of the victim's non-enumerable message identifier.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2026-58580

Affected Products

Lobehub

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-58580 · Security Note
• https://github.com/lobehub/lobehub/issues/16534 · Note
• https://vulncheck.com/advisories/lobechat-broken-object-level-authorization-in-message-sub-resource-writes · Note