CVE-2024-47066 Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
Attackers can bypass SSRF protections in Lobe Chat to access internal network resources via malicious redirects.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-47066?
CVE-2024-47066 is a critical server-side request forgery vulnerability in lobehub lobe-chat, published on 23 Sep 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.19.13, server-side request forgery protection implemented in `src/app/api/proxy/route.ts` does not consider redirect and could be bypassed when attacker provides an external malicious URL which redirects to internal resources like a private network or loopback address. Version 1.19.13 contains an improved fix for the issue.
Weakness: CWE-918
Which versions are affected by CVE-2024-47066?
2 open source packages ship an affected version, including @lobehub/chat. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
@lobehub/chat npm | All versions | 1.19.13 |
@lobehub/chat npm | All versions | 1.19.13 |
Products include Lobehub Lobe Chat.
How do I fix CVE-2024-47066?
Upgrade @lobehub/chat to 1.19.13 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-47066 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-47066 exists.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in lobehub lobe-chat
- CVE-2024-32964 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
- CVE-2024-32965 ssrf vulnerability in lobe-chat
- CVE-2025-59417 Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages
- CVE-2024-37895 API Key Leak in lobe-chat
- CVE-2024-24566 Lobe Chat unauthorized access to plugins
Sources
Also known as GHSA-3fc8-2r3f-8wrg.