lobehub has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 7.8 (high), with 1 rated critical.

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: 7.8
Publish → KEV: —
Last 90 days: 1 prev 1

Weakness classes

Products

@lobehub/lobehub 1
lobehub 1

Follow lobehub:RSS feed Save a search →Embed badge ↗

Total CVEs

Critical

CISA KEV

Exploited

Worst active — by depth score

lobehub vulnerabilities

CVEs affecting lobehub, newest first. Open any entry for full detail, references, and exploit status.

2 CVEsRSS

CVE-2026-85621Medium· 6.5PoC

2w ago

LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu

LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route (/api/agent/webhooks/:platform) is unauthenticated by design and delegates verification to each a…

▾ Twilightlobehub · lobehubEPSS 0.16%via CVEORG

CVE-2026-54157Critical· 9.0PoC

3mo ago

LobeHub: Unauthenticated SSRF in `/webapi/proxy`

▾ Abyssallobehub · @lobehub/lobehubEPSS 1.8%via GHSA