CVE-2025-59417 Details
Description
Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting (XSS) vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the server is like <lobeArtifact identifier="ai-new-interpretation" ...> , it will be rendered with the lobeArtifact node, instead of the plain text. However, when the type of the lobeArtifact is image/svg+xml , it will be rendered as the SVGRender component, which internally uses dangerouslySetInnerHTML to set the content of the svg, resulting in XSS attack. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating a compromised MCP server, or leveraging tool integrations, can exploit this vulnerability. This vulnerability is fixed in 1.129.4.
A cross-site scripting (XSS) vulnerability has been identified in Lobe Chat versions prior to 1.129.4. This issue arises when the application processes chat messages containing specific server responses, such as '<lobeArtifact identifier="ai-new-interpretation" type="image/svg+xml" ...>'. Instead of displaying this as plain text, Lobe Chat renders it with a 'lobeArtifact' node. When the 'lobeArtifact' type is 'image/svg+xml', it is processed by the 'SVGRender' component, which uses 'dangerouslySetInnerHTML' to inject the SVG content. This creates an XSS vulnerability, as the SVG can include harmful elements, such as an image tag with an 'onerror' attribute that executes JavaScript. Any user who can send messages or inject content through compromised servers or tools can exploit this vulnerability.
Users can update to Lobe Chat version 1.129.4 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Sep 19, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j | CISA-ADP | ExploitVendor Advisory |
| https://github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c | [email protected] | Patch |
| https://github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| lobehub lobe chat | < 1.129.4 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Sep 25, 2025 | Initial Analysis | [email protected] |
| Sep 19, 2025 | CVE Modified | CISA-ADP |
| Sep 18, 2025 | New CVE Received | [email protected] |