CVE-2026-120315: lobehub chat, обхождане на път

Описание

Оригинално описание

LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write arbitrary files by supplying unsanitized file names to writeTempFile(). Attackers can create a file record via file.createFile with a traversal name, then trigger document parsing to overwrite application files like startServer.js for code execution or denial of service.

Засегнати продукти

• lobehub chat: 1.84.26 преди 2.1.49; 2.1.49

Вид слабост

• CWE-22 Неправилно ограничаване на път до позволена директория

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-120315
• https://nvd.nist.gov/vuln/detail/CVE-2026-120315
• https://github.com/lobehub/lobehub/security/advisories/GHSA-2g9j-v25c-4j97
• https://www.vulncheck.com/advisories/lobehub-chat-1.84.26-before-2.1.49-path-traversal-rce-via-writetempfile