Vendor
LobeChat versions 1.84.26 through 2.1.48 contain a path traversal vulnerability in writeTempFile that allows authenticated users to achieve remote code execution by overwriting application startup scripts.