Which versions of LobeChat are affected by CVE-2026-58578?

LobeChat versions before 2.2.10-canary.15 contain a denial-of-service vulnerability exploitable by authenticated users who import malicious skills from GitHub, causing the entire Node.js server to…. A patch is available.

Is there a public PoC exploit available for CVE-2026-58578?

Yes, a public proof-of-concept exploit is available for CVE-2026-58578. Prioritise patching immediately. EPSS: 0.3%.

How to fix or mitigate CVE-2026-58578?

Within 24 hours: Inventory all LobeChat deployments and current versions; disable or restrict GitHub-based skill imports pending patch deployment. Within 7 days: Upgrade all affected instances to LobeChat 2.2.10-canary.15 or later and validate functionality. Within 30 days: Review and strengthen controls on skill import sources to limit attack surface.

LobeChat CVE-2026-58578

Q: What is the CVSS score of CVE-2026-58578?

CVE-2026-58578 has a CVSS 4.0 base score of 7.1 (High). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.3%.

EUVD-2026-41420 HIGH

Inefficient Regular Expression Complexity (ReDoS) (CWE-1333)

2026-07-02 VulnCheck

GHSA-g4jq-25cx-3cw5

Denial Of Service Node.js Lobehub

7.1

CVSS 4.0 · Vendor: VulnCheck

Severity by source

Vendor (VulnCheck) PRIMARY

7.1 MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

vuln.today AI

6.5 MEDIUM

Network-reachable skill import with low complexity but requires an authenticated account (PR:L); impact is a full event-loop stall so A:H, with no confidentiality or integrity effect.

3.1 AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 02, 2026 - 20:30 vuln.today

Severity Changed

Jul 02, 2026 - 20:22 NVD

MEDIUM HIGH

CVSS changed

Jul 02, 2026 - 20:22 NVD

6.5 (MEDIUM) 7.1 (HIGH)

CVE Published

Jul 02, 2026 - 19:38 cve.org

HIGH 7.1

DescriptionCVE.org

LobeChat before version 2.2.10-canary.15 contains a regular expression denial of service (ReDoS) vulnerability that allows authenticated attackers to block the Node.js event loop by supplying a catastrophic-backtracking pattern in a GitHub repository URL path during skill import. Attackers can craft a malicious basePath value containing unescaped regex metacharacters such as catastrophic-backtracking patterns, which are injected into a dynamically constructed regular expression in the findSkillMd function and executed synchronously against archive entries, denying service to all concurrent users for tens of seconds per request.

AnalysisAI

Denial of service in LobeChat before 2.2.10-canary.15 lets an authenticated user hang the entire Node.js server by importing a GitHub-hosted skill whose repository URL path contains a catastrophic-backtracking regex pattern. Because the malicious basePath is compiled into a dynamic regular expression in findSkillMd and matched synchronously against archive entries, a single request blocks the shared event loop for tens of seconds, denying service to all concurrent users. Publicly available exploit code exists and a vendor patch is available, though there is no public exploit identified as being used in active exploitation.

Technical ContextAI

LobeChat (LobeHub) is a Node.js/TypeScript open-source AI chat framework that supports importing 'skills' from GitHub repositories. The affected code path constructs a regular expression at runtime by interpolating a user-controlled basePath (derived from the GitHub repository URL path) without escaping regex metacharacters, then evaluates it against archive entries in findSkillMd. This is a textbook CWE-1333 (Inefficient Regular Expression Complexity / ReDoS): an attacker-supplied pattern such as nested quantifiers causes catastrophic backtracking, and because the match runs synchronously on Node.js's single-threaded event loop, the whole process stalls rather than just the offending request. The single affected CPE is cpe:2.3:a:lobehub:lobehub:*:*:*:*:*:*:*:* (all versions prior to the fix).

RemediationAI

Vendor-released patch: upgrade to LobeChat 2.2.10-canary.15 or later (https://github.com/lobehub/lobehub/releases/tag/v2.2.10-canary.15); the code fix is in commit 349bbe326eb8635d6d9c6a96d12702681ae3a84a and PR https://github.com/lobehub/lobehub/pull/16548, which properly escapes the user-supplied basePath before regex construction. If you cannot upgrade immediately, restrict who can use the GitHub skill-import feature by limiting accounts to trusted users, or disable skill import entirely on shared multi-tenant instances - the trade-off is loss of GitHub skill-import functionality for all users. As a secondary control, place the instance behind rate limiting or a per-user request timeout so a single hanging request cannot be repeated to sustain the outage, accepting that a synchronous event-loop stall may still not be interrupted by request-level timeouts. Track details via the VulnCheck advisory and issue https://github.com/lobehub/lobehub/issues/16494.