CVE-2025-59426 lobe-chat has an Open Redirect
Attackers can redirect users to malicious domains via crafted headers in Lobe Chat deployments trusting unvalidated proxy headers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2025-59426?
CVE-2025-59426 is a medium-severity vulnerability in lobehub lobe-chat, published on 25 Sep 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-* headers to the origin as-is, or where the origin trusts them without validation, an attacker can inject an arbitrary host and trigger an open redirect that sends users to a malicious domain. This issue has been patched in version 1.130.1.
Weakness: CWE-601
Which versions are affected by CVE-2025-59426?
2 open source packages ship an affected version, including @lobehub/chat. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
@lobehub/chat npm | All versions | 1.130.1 |
@lobehub/chat npm | All versions | 1.130.1 |
Products include Lobehub Lobe Chat.
How do I fix CVE-2025-59426?
Upgrade @lobehub/chat to 1.130.1 or later.
Is CVE-2025-59426 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-59426 exists.
Other vulnerabilities in lobehub lobe-chat
- CVE-2024-47066 Lobe Chat has insufficient fix for GHSA-mxhq-xw3g-rphc (CVE-2024-32964)
- CVE-2024-32964 lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
- CVE-2024-32965 ssrf vulnerability in lobe-chat
- CVE-2025-59417 Lobe Chat Desktop Vulnerable to Remote Code Execution via XSS in Chat Messages
- CVE-2024-37895 API Key Leak in lobe-chat
Sources
Also known as GHSA-xph5-278p-26qx.