Is CVE-2026-23835 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-23835 being exploited in the wild.

How severe is CVE-2026-23835?

Medium severity, with a CVSS score of 4, published 1 February 2026.

Which products and versions are affected?

Lobehub all versions up to 1.143.2; @lobehub/chat (npm) SEMVER:introduced=0,fixed=1.143.3.

Is there a fix for CVE-2026-23835?

Yes. @lobehub/chat (npm): upgrade to 1.143.3 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-23835 attacked?

It is attacked over the network.

Am I affected by CVE-2026-23835?

Check whether you run Lobehub or @lobehub/chat (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-23835: LobeHub improper authorization in presigned file upload

CVE-2026-23835 · Severity: medium · CVSS 4 · Published 2026-02-01

LobeHub is an AI chat application platform that allows users to upload files to a knowledge base. An authenticated attacker can intercept and modify upload requests to bypass storage quotas, upload arbitrary files to unintended locations, and misrepresent file sizes to the billing system. This allows circumventing subscription limits, exhausting server resources, and causing service degradation for all users on a shared plan.

Technologies: Lobehub, @lobehub/chat (npm). Vendors: LobeHub, npm.

Quick answers

Is CVE-2026-23835 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-23835 being exploited in the wild.
How severe is CVE-2026-23835?: Medium severity, with a CVSS score of 4, published 1 February 2026.
Which products and versions are affected?: Lobehub all versions up to 1.143.2; @lobehub/chat (npm) SEMVER:introduced=0,fixed=1.143.3.
Is there a fix for CVE-2026-23835?: Yes. @lobehub/chat (npm): upgrade to 1.143.3 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-23835 attacked?: It is attacked over the network.
Am I affected by CVE-2026-23835?: Check whether you run Lobehub or @lobehub/chat (npm) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

@lobehub/chat (npm): upgrade to 1.143.3 or later
```
npm install @lobehub/chat@1.143.3
```

Technical details

The file upload feature in LobeHub's Knowledge Base does not validate the integrity of presigned upload requests, allowing modification of user-controlled parameters such as file name and size. An authenticated attacker can intercept POST requests to /trpc/lambda/file.createFile, modify the name and size fields, and upload files beyond the subscription plan's storage limits while misrepresenting actual file sizes to the server's quota tracking system. The root cause is improper authorization and validation of request parameters (CWE-73: External Control of File Name or Path). The attack requires authentication and network access but no additional user interaction. Successful exploitation results in quota bypass, storage exhaustion, billing fraud, service degradation, and potential denial of service affecting other users. The vulnerability is fixed in version 1.143.3.

Affected products

LobeHub LobeHub all versions up to 1.143.2

Identifiers

CVE-2026-23835
GHSA-wrrr-8jcv-wjf5

Timeline

2026-01-30: disclosed: Published on NVD
2026-02-01: disclosed: Published on GitHub Security Advisory
2026-02-01: patched: Fix released in version 1.143.3

References

https://github.com/lobehub/lobehub/security/advisories/GHSA-wrrr-8jcv-wjf5

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.