by Kastro
Paper/Archive/CVE-2025-66222

CVE-2025-66222

ThinkInAIXYZ deepchat — DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)

EPSS 0.6%public exploitCVSS 9.7
critical.is priorityof 100
49
CVSS 9.7 (CNA)9.7 / 10 × 3029.1Not in CISA KEV+300.0EPSS percentile 49.0.490 × 209.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

DeepChat is a smart assistant uses artificial intelligence. In 0.5.0 and earlier, there is a Stored Cross-Site Scripting (XSS) vulnerability in the Mermaid diagram renderer allows an attacker to execute arbitrary JavaScript within the application context. By leveraging the exposed Electron IPC bridge, this XSS can be escalated to Remote Code Execution (RCE) by registering and starting a malicious MCP (Model Context Protocol) server.

Affected

ProductAffectedFixed inSource
deepchat< 0.5.0–CNA

Scores by source

GitHub_M (CNA)9.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

refgithub.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-v8v5-c872-mf8rrefgithub.com/ThinkInAIXYZ/deepchat/commit/371ca7b42e3685aee6e3f0c61e85277ed1ff4db7