CVE-2026-112014
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover every third-party AI provider API key.
Risk Assessment
An attacker with access to an export file can recover all AI provider API keys, potentially leading to unauthorized access and costs for the victim.
Recommendation
Update LobsterAI to version 2026.10.16 or later, which fixes this vulnerability, and revoke all exported API keys.
Other vulnerabilities in LobsterAI
See all- CVE-2026-108156High
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation recursively delete arbitrary user-writable directories, such as the home directory.
- CVE-2026-90818Medium
A vulnerability has been discovered in netease-youdao LobsterAI (versions 2026.6.15, 2026.8.28, 2026.9.3, 2026.9.4) in the function OpenClawConfigSync.buildBrowserConfig, leading to server-side request forgery. The attack can be launched remotely, and the exploit has been publicly released.
- CVE-2026-18995Medium
A flaw has been found in netease-youdao LobsterAI 2026.6.10, affecting the function parseMediaTokensFromText in the file src/renderer/services/artifactParser.ts in the MEDIA Path Handler component. This manipulation causes information disclosure. The attack is possible to be carried out remotely, and the exploit has been published.
Original NVD description (English source)
LobsterAI before 2026.10.16 contains a hardcoded password vulnerability that allows attackers to decrypt exported provider API keys encrypted with the constant 'lobsterai-APP'. Attackers who obtain a providers export file can derive the AES-GCM key via PBKDF2 using the embedded salt and recover every third-party AI provider API key.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS