CVE-2026-72594: lobehub lobe-chat - Stored Cross-Site Scripting via Unrestricted SVG Avatar Upload
A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Change the avatar upload handler logic to determine allowed content types by inspecting the uploaded file content (not by using the original filename-derived stored file extension and S3 content type) so that SVG with script elements is not accepted.
lobe-chat avatar upload handler MIME type / file type validation = derived from original filename - Compensating control
Block or restrict SVG file uploads for user avatars (e.g., reject files with .svg extension) to prevent stored XSS via crafted SVG avatar images.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-72594?
The severity of CVE-2026-72594 is rated as high with a score of 7.6.
How do I fix CVE-2026-72594?
To fix CVE-2026-72594, ensure that user-uploaded SVG files are properly sanitized and validate the file extensions before processing.
Who is affected by CVE-2026-72594?
CVE-2026-72594 affects low-privileged authenticated users of the lobehub/lobe-chat application.
What type of vulnerability is CVE-2026-72594?
CVE-2026-72594 is a stored cross-site scripting (XSS) vulnerability.
What can an attacker do with CVE-2026-72594?
An attacker can inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar.