What is CVE-2025-59417?

CVE-2025-59417 is a medium-severity vulnerability in Lobehub Lobe-Chat, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-09-18.

How severe is CVE-2025-59417?

Medium severity. CVSS v3 base score is 6.1 out of 10.

Is CVE-2025-59417 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

XSS in Lobehub Lobe-Chat

CVE-2025-59417

Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.129.4, there is a a cross-site scripting (XSS) vulnerability when handling chat message in lobe-chat that can be escalated to remote code execution on the user’s machine. In lobe-chat, when the response from the server is like <lobeArtifact identifier="ai-new-interpretation" ...> , it will be rendered with the lobeArtifact node, instead of the plain text. However, when the type of the lobeArtifact is image/svg+xml , it will be rendered as the SVGRender component, which internally uses dangerouslySetInnerHTML to set the content of the svg, resulting in XSS attack. Any party capable of injecting content into chat messages, such as hosting a malicious page for prompt injection, operating a compromised MCP server, or leveraging tool integrations, can exploit this vulnerability. This vulnerability is fixed in 1.129.4.

Vulnerability class: XSS (Cross-Site Scripting)

Published 2025-09-18 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N.

EPSS exploit prediction

EPSS: 0.004 (31.3th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 31st percentile — 31.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Lobehub Lobe-Chat — versions < 1.129.4
Lobehub Lobe Chat

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

github.com/lobehub/lobe-chat/security/advisories/GHSA-m79r-r765-5f9j (Exploit, Vendor Advisory)
github.com/lobehub/lobe-chat/commit/9f044edd07ce102fe9f4b2fb47c62191c36da05c (Patch)

Frequently asked questions

What is CVE-2025-59417?: CVE-2025-59417 is a medium-severity vulnerability in Lobehub Lobe-Chat, classified under Cross-site Scripting. CVSS score: 6.1/10. Published 2025-09-18.
How severe is CVE-2025-59417?: Medium severity. CVSS v3 base score is 6.1 out of 10.
Is CVE-2025-59417 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.