Issues · netease-youdao/LobsterAI · GitHub

Labels Milestones

[Security] LobsterAI HTML preview server follows in-root symlinks and discloses arbitrary local files

#2288

· YLChen-007 opened

on Jul 7, 2026

[Security] LobsterAI NIM outbound media flow allows arbitrary host-local file exfiltration via assistant-generated absolute paths

#2287

· YLChen-007 opened

on Jul 7, 2026

[Security] Unauthenticated local token proxy in LobsterAI allows any local process to replay the victim's authenticated server-model API capability

#2286

· YLChen-007 opened

on Jul 7, 2026

skills.load.watch 性能瓶颈 + 持久化 bug + 缺乏 UI 开关，建议将技能文件监听从自动改为手动增加UI功能设置

#2243

· woxinsj opened

on Jul 1, 2026

趋势判断：编程工具的"OpenClaw 化"和OpenClaw 类工具的编程工具化，给 LobsterAI的重要建议

#2239

· woxinsj opened

on Jul 1, 2026

同一个模型在 LobsterAI 比 CodeBuddy 慢很多，

#2230

· woxinsj opened

on Jun 30, 2026

Memory Search 无法切换为 local embedding provider，索引重建被 DB 锁阻塞 (EBUSY)

#2216

· AL-Mint opened

on Jun 28, 2026

安装 LobsterAI，修复反复出现的「Resource extraction failed: could not start extractor process」错误。

#2215

· woxinsj opened

on Jun 27, 2026

桌面端"数据备份"功能导致主进程卡死（未响应），类型：Bug Report

#2214

· woxinsj opened

on Jun 26, 2026

[Security] LobsterAI restores private-network browser access by default and weakens the bundled OpenClaw SSRF guard

#2181

· YLChen-007 opened

on Jun 21, 2026

Build "AI Collaborator" Form: Introduce Natural Language Command Bar and Task Dispatch Console for Cross-Model Orchestration and Project-Level Memory

#2180

· woxinsj opened

on Jun 19, 2026

[Security] LobsterAI automatic artifact loading allows message-derived arbitrary local file reads

#2176

· YLChen-007 opened

on Jun 18, 2026