CVE-2025-62505: SSRF Vulnerability in @lobehub/chat Package Allows Access to Internal Resources
Summary
CVE-2025-62505: Lobe Chat vulnerable to Server-Side Request Forgery with native web fetch module. Affects @lobehub/chat versions < 1.136.2. Fixed in 1.136.2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The @lobehub/chat package is a web-based chat application that utilizes tRPC for communication between clients and servers. It allows users to interact through various tools, including a web crawler. However, the package has a vulnerability that permits unauthorized access to internal network resources, potentially exposing sensitive information.
Vulnerability Detail
The vulnerability arises from the lack of validation on user-supplied URLs sent to the tRPC endpoint tools.search.crawlPages. When a client sends an arbitrary URL array along with the implementation type 'naive', the server makes outbound HTTP requests to those URLs without any restrictions. This allows attackers to exploit the server's network position to access internal resources, including APIs and management interfaces, leading to potential data exposure and security breaches.
How To Fix
Minimum fixed version
1.136.2
This is the first release that contains the fix.
npm install @lobehub/chat@1.136.2Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, avoid using the 'naive' implementation in the tRPC calls and ensure that any URLs passed to the server are properly validated and sanitized to prevent unauthorized access to internal resources.
Conclusion
The CVE-2025-62505 vulnerability in the @lobehub/chat package poses a significant risk by allowing SSRF attacks that can expose internal resources. It is crucial to update to the patched version to safeguard against potential exploitation.
See every vulnerability recorded for @lobehub/chat →
FAQ
CVE-2025-62505 is a security vulnerability in the @lobehub/chat package that allows for Server-Side Request Forgery (SSRF), enabling attackers to access internal network resources.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to exposure of sensitive internal data, leakage of authentication tokens, and unauthorized access to internal APIs and management interfaces.
Yes, a patch is available in version 1.136.2 of the @lobehub/chat package. It is recommended to update to this version to mitigate the vulnerability.
Server-Side Request Forgery (SSRF) is a vulnerability that allows an attacker to send crafted requests from a vulnerable server to internal or external resources. It is dangerous because it can lead to unauthorized access to sensitive data and services.
References
Related vulnerabilities
Recent vulnerabilities recorded for @lobehub/chat.
