CVE-2026-23733: Lobe Chat XSS Vulnerability Leading to Remote Code Execution
Summary
CVE-2026-23733: Lobe Chat affected by Cross-Site Scripting(XSS) that can escalate to Remote Code Execution(RCE). Affects @lobehub/chat versions < 1.143.2. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Lobe Chat is an open-source chat application that allows users to communicate and share artifacts, including diagrams rendered using the Mermaid library. The application leverages Electron for desktop functionality, providing a rich user experience. However, it has been found to be vulnerable to a stored Cross-Site Scripting (XSS) attack that can escalate to Remote Code Execution (RCE), posing significant security risks to users.
Vulnerability Detail
The vulnerability arises from the Mermaid artifact renderer within the Lobe Chat application. Specifically, the Renderer component directly incorporates user-generated content into the DOM without proper sanitization. This allows attackers to inject malicious JavaScript through crafted Mermaid diagrams. By exploiting the exposed electronAPI IPC bridge, an attacker can execute arbitrary system commands on the victim's machine, leading to full RCE. The vulnerability affects versions up to 1.143.2 of the @lobehub/chat package.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, avoid rendering untrusted content in the Mermaid component. Implement input validation and sanitization to ensure that any user-generated content does not contain executable JavaScript or harmful HTML tags.
Conclusion
The XSS vulnerability in Lobe Chat poses a serious risk as it can lead to Remote Code Execution. Users are strongly advised to update to the latest version of the @lobehub/chat package to mitigate this risk. Implementing input validation and sanitization can serve as a temporary workaround until the update is applied.
See every vulnerability recorded for @lobehub/chat →
FAQ
The vulnerability is a stored Cross-Site Scripting (XSS) issue that can escalate to Remote Code Execution (RCE) due to improper handling of user-generated content.
The vulnerability affects versions of the @lobehub/chat package from 0 up to 1.143.2.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to check your application without needing to sign up.
The CVSS score of this vulnerability is 6.4, indicating a moderate severity level.
If you cannot update the package immediately, ensure to validate and sanitize any user input to prevent the execution of malicious scripts as a temporary measure.
References
Related vulnerabilities
Recent vulnerabilities recorded for @lobehub/chat.
