The updated CVE description confirms a stored cross‑site scripting flaw in lobehub lobe‑chat up to version 2.2.13. A low‑privileged authenticated user can upload a crafted SVG file as an avatar. The upload handler trusts the file extension and MIME type from the original filename, allowing a malicious <script> element to be embedded within the SVG. When a victim user loads the avatar, the embedded script runs in the victim’s browser, potentially enabling session hijacking, credential theft, or defacement of the user’s view.

The vulnerability impacts lobehub lobe‑chat versions up to and including 2.2.13. All users who can upload avatar images are subject to attack. The bug is present in all deployments of those releases, regardless of environment or configuration, unless the avatar upload functionality has been disabled or secured by custom modifications.

The CVSS base score of 7.6 classifies this vulnerability as high severity. No EPSS score is reported, and the issue is not currently listed in the CISA KEV catalog. The attack vector requires only that an attacker be authenticated and have the ability upload a profile avatar, a capability commonly granted to all users. Exploitation is straightforward: the attacker creates a malicious SVG, uploads it, and waits for victims to view the avatar, at which point the payload executes. Given the ubiquity of avatar uploads, the risk remains significant for any deployed instance of the affected software.