Cyber Resilience

CVE-2024-32965

HighPublic PoC

Published: 26 November 2024

Published
26 November 2024
Modified
23 September 2025
KEV Added
—
Patch
—
CVSS Score v3.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:L
EPSS Score 0.0304 87.0th percentile
Risk Priority 18 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-32965 is a high-severity SSRF (CWE-918) vulnerability in Lobehub Lobe Chat. Its CVSS base score is 8.1 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 13.0% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

This vulnerability is AI-related — categorised as Enterprise AI Assistants; in the Privacy and Disclosure risk domain; MITRE ATLAS techniques in scope: Acquire Public AI Artifacts (AML.T0002), Search Application Repositories (AML.T0004), Discover LLM Hallucinations (AML.T0062).

EU & UK References

Vulnerability details

Lobe Chat is an open-source, AI chat framework. Versions of lobe-chat prior to 1.19.13 have an unauthorized ssrf vulnerability. An attacker can construct malicious requests to cause SSRF without logging in, attack intranet services, and leak sensitive information. The jwt…

more

token header X-Lobe-Chat-Auth strored proxy address and OpenAI API Key, can be modified to scan an internal network in the target lobe-web environment. This issue has been addressed in release version 1.19.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

CWE(s)
CWE-918

AI Security AnalysisAI

AI Category
Enterprise AI Assistants
Risk Domain
Privacy and Disclosure
OWASP Top 10 for LLMs 2025
None mapped
Classification Reason
Lobe Chat is an open-source AI chat framework, which aligns with Enterprise AI Assistants as it provides a chat interface for interacting with AI models like OpenAI.

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1046 Network Service Discovery Discovery
Adversaries may attempt to get a listing of services running on remote hosts and local network infrastructure devices, including those that may be vulnerable to remote software exploitation.
attack.mitre.org →
T1595.001 Scanning IP Blocks Reconnaissance
Adversaries may scan victim IP blocks to gather information that can be used during targeting.
attack.mitre.org →
Why these techniques?

SSRF vulnerability in public-facing Lobe Chat (T1190) enables unauthorized scanning of internal IP blocks (T1595.001) and network service discovery (T1046) to attack intranet services and leak sensitive information.

MITRE ATLAS TechniquesAI

MITRE ATLAS techniques

AML.T0002: Acquire Public AI ArtifactsAML.T0004: Search Application RepositoriesAML.T0062: Discover LLM HallucinationsAML.T0040: AI Model Inference API Access

Affected Assets

lobehub
lobe chat
≤ 1.19.13

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

CA-8 Penetration Testing
addresses: CWE-918

Penetration testing attempts server-side requests to internal resources, identifying SSRF weaknesses for remediation.

SC-7 Boundary Protection
addresses: CWE-918

Outbound connections to external resources can be monitored and limited at the boundary, reducing SSRF impact.

SI-10 Information Input Validation
addresses: CWE-918

Validates server-side URLs and resource references to block SSRF attempts.

SI-4 System Monitoring
addresses: CWE-918

Detects server-side request forgery through monitoring of unexpected outbound connections.

References