MediumVulnerabilityLLM-specific
CVE-2025-59417: Lobe Chat cross-site scripting in chat messages via SVG artifacts
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2025-59417
- Published
- Record updated
- Affected
- @lobehub/chat <= 1.129.3
- Fixed in
- 1.129.4
- released September 18, 2025, on the day of disclosure
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.4%
Summary
Lobe Chat versions prior to 1.129.4 contain a cross-site scripting flaw in chat message handling. When a server response includes a lobeArtifact tag with type image/svg+xml, the SVGRender component inserts the content through dangerouslySetInnerHTML, enabling XSS that can be escalated to remote code execution on the user's machine. Anyone able to inject content into chat messages, such as through a malicious page used for prompt injection, a compromised MCP server, or tool integrations, can exploit it.
Mitigation
Fixed in 1.129.4.
Topics
Related items
- MediumCVE-2026-121936: easyVoice server-side request forgery through openaiBaseUrl in /api/v1/ttsSimilar attack · NVD/CVE Database
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- InfoHow to Turn AI Red Team Findings Into Runtime ControlsSimilar attack · Straiker Blog
- MediumCVE-2026-118628: MLflow get-artifacts server-side request forgery information disclosureSimilar attack · NVD/CVE Database
- HighCVE-2026-118625: MLflow Tracking Server privilege escalation via get_endpointsSimilar attack · NVD/CVE Database