CVE-2026-85621mediumCWE-345

CVE-2026-85621: medium-severity vulnerability in lobehub

LobeChat 2.2.1 Webhook Signature Verification Bypass QQ Feishu

Published · Updated

Follow this CVE+ Monitor lobehub

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.2%
LobeChat (LobeHub) 2.2.1 does not properly verify inbound chat-platform webhook signatures in the QQ and Feishu adapters. The webhook route (/api/agent/webhooks/:platform) is unauthenticated by design and delegates verification to each adapter; the QQ adapter performs no Ed25519 signature verification on dispatched message events, and the Feishu adapter only performs an optional static-token comparison that is skipped when no token is configured (the default) and is not a body signature. An unauthenticated attacker who knows the public webhook URL can POST forged inbound messages with an attacker-chosen sender identity and arbitrary text, causing the bot owner's agent to process attacker-controlled input and treat the attacker as a trusted platform sender.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Affected products
lobehub · lobehub
Related CVEs — lobehub

In the same product, most dangerous first.

CVE-2026-54157CRITICALLobeHub: Unauthenticated SSRF in `/webapi/proxy`EPSS 1.8%CVE-2026-58578HIGHLobeChat < 2.2.10-canary.15 - Regular Expression Denial of Service in GitHub Skill ImportEPSS 0.5%CVE-2026-59098HIGHLobeChat 2.2.9 - Cross-User Document Disclosure via Unscoped RAG Semantic SearchEPSS 0.4%CVE-2026-59095HIGHLobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrlEPSS 0.4%CVE-2026-59100LOWLobeChat 2.2.9 - Broken Object Level Authorization via Chat-Group Agent OperationsEPSS 0.3%CVE-2026-42045MEDIUMLobeHub: Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)EPSS 0.3%