by Kastro
Paper/Archive/CVE-2025-66481

CVE-2025-66481

ThinkInAIXYZ deepchat — DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content

EPSS 0.6%public exploitCVSS 9.7
critical.is priorityof 100
49
CVSS 9.7 (CNA)9.7 / 10 × 3029.1Not in CISA KEV+300.0EPSS percentile 47.7.477 × 209.5Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid content. The recent security patch for MermaidArtifact.vue is insufficient and can be bypassed using unquoted HTML attributes combined with HTML entity encoding. Remote Code Execution is possible on the victim's machine via the electron.ipcRenderer interface, bypassing the regex filter intended to strip dangerous attributes. There is no fix at time of publication.

Affected

ProductAffectedFixed inSource
deepchat<= 0.5.1–CNA

Scores by source

GitHub_M (CNA)9.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitgithub.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-h9f5-7hhf-fqm4