CVE-2024-24566

Summary

CVE-2024-24566 is a vulnerability affecting Lobe Chat, a chatbot framework with speech synthesis capabilities. When the application is password-protected, an issue arises in its plugin system, enabling unauthorized access to plugins, bypassing the password requirement. This vulnerability has been addressed in version 0.122.4 of the software.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.