chat vulnerabilities

1 known vulnerability in chat from Lobehub. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  chat: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-120315Nov 2, 2026Lobehub

  LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile(). Attackers can create a file record via file.createFile with a trave