{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/lobehub/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:lobehub:lobechat:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.8,"id":"CVE-2026-120315"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["LobeChat (1.84.26 \u003c= v \u003c 2.1.49)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["LobeHub"],"content_html":"\u003cp\u003eLobeChat versions 1.84.26 up to 2.1.49 contain a path traversal vulnerability in the \u003ccode\u003ewriteTempFile()\u003c/code\u003e function. An authenticated attacker can supply a malicious filename to the \u003ccode\u003efile.createFile\u003c/code\u003e method to write files outside of the intended directory. By triggering document parsing features, the attacker can overwrite sensitive application files, such as \u003ccode\u003estartServer.js\u003c/code\u003e, to achieve remote code execution or cause denial of service.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAuthenticated users can achieve remote code execution (RCE) by overwriting application startup files or render the application unusable through arbitrary file overwriting (Denial of Service).\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpdate LobeChat instances to version 2.1.49 or later immediately to patch the path traversal vulnerability in the \u003ccode\u003ewriteTempFile\u003c/code\u003e function. Perform an audit of temporary file directories and application source code integrity to ensure no malicious files have been planted or existing files modified by unauthorized users prior to patching.\u003c/p\u003e\n","date_modified":"2026-11-02T07:16:58Z","date_published":"2026-11-02T07:16:58Z","id":"https://feed.craftedsignal.io/briefs/2026-11-lobechat-path-traversal/","summary":"LobeChat versions 1.84.26 through 2.1.48 contain a path traversal vulnerability in writeTempFile that allows authenticated users to achieve remote code execution by overwriting application startup scripts.","title":"LobeChat: Path traversal arbitrary file write (CVE-2026-120315)","url":"https://feed.craftedsignal.io/briefs/2026-11-lobechat-path-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - LobeHub","version":"https://jsonfeed.org/version/1.1"}