Auth bypass in Lobehub
CVE-2026-58580
LobeChat through 2.2.9 server-database deployments are vulnerable to broken object-level authorization in MessageModel. The updateMessagePlugin, updatePluginState, updatePluginError, updateTTS and updateTranslate methods filter target rows by message id alone, omitting the userId scope that sibling methods apply, and findMessagePlugin reads back by id alone. Reachable via the corresponding tRPC message procedures, an authenticated user who knows another user's message identifier can overwrite that victim's plugin tool-call metadata, plugin state/error, text-to-speech and translation records on the same instance, and the tampered content is served back to the victim. Exploitation requires knowledge of the victim's non-enumerable message identifier.
Vulnerability class: IDOR (Insecure Direct Object Reference)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N.
EPSS exploit prediction
EPSS: 0.003 (14.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 15th percentile — 14.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Lobehub — versions 0
Weakness classification (CWE)
References
- github.com/lobehub/lobehub/issues/16534 (issue-tracking)
- www.vulncheck.com/advisories/lobechat-broken-object-level-authorization-in-mess… (third-party-advisory)
Frequently asked questions
- What is CVE-2026-58580?
- CVE-2026-58580 is a medium-severity vulnerability in Lobehub, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.9/10. Published 2026-07-02.
- How severe is CVE-2026-58580?
- Medium severity. CVSS v3 base score is 5.9 out of 10.