lobehub lobe-chat up to 2.0.0-next.193 knowledgeBase.removeFilesFromKnowledgeBase access control

Summaryinfo

A vulnerability, which was classified as critical, has been found in lobehub lobe-chat up to 2.0.0-next.193. Impacted is the function knowledgeBase.removeFilesFromKnowledgeBase. This manipulation causes access control. This vulnerability is tracked as CVE-2026-23522. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability has been found in lobehub lobe-chat up to 2.0.0-next.193 and classified as critical. Affected by this vulnerability is the function knowledgeBase.removeFilesFromKnowledgeBase. The manipulation with an unknown input leads to a access control vulnerability. The CWE definition for the vulnerability is CWE-284. The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

LobeChat is an open source chat application platform. Prior to version 2.0.0-next.193, `knowledgeBase.removeFilesFromKnowledgeBase` tRPC ep allows authenticated users to delete files from any knowledge base without verifying ownership. `userId` filter in the database query is commented out, so it's enabling attackers to delete other users' KB files if they know the knowledge base ID and file ID. While the vulnerability is confirmed, practical exploitation requires knowing target's KB ID and target's file ID. These IDs are random and not easily enumerable. However, IDs may leak through shared links, logs, referrer headers and so on. Missing authorization check is a critical security flaw regardless. Users should upgrade to version 2.0.0-next.193 to receive a patch.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-23522 since 01/13/2026. The exploitation appears to be difficult. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are known, but no exploit is available. MITRE ATT&CK project uses the attack technique T1068 for this issue.

Upgrading to version 2.0.0-next.193 eliminates this vulnerability. Applying the patch 2c1762b85acb84467ed5e799afe1499cd2f912e6 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-3318). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Chat Software

Vendor

• lobehub

Name

• lobe-chat

Version

• 2.0.0-next.193

License

• open-source

Website

• Product: https://github.com/lobehub/lobe-chat/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion