A vulnerability classified as critical was found in lobehub lobe-chat up to 2.0.0-next.193. This issue affects the function
knowledgeBase.removeFilesFromKnowledgeBase. The manipulation results in improper access controls.
This vulnerability is identified as CVE-2026-23522. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is advised.
