by Kastro
Paper/Archive/CVE-2025-66580

CVE-2025-66580

OpenAgentPlatform Dive — Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution

EPSS 0.6%public exploitCVSS 9.7
critical.is priorityof 100
49
CVSS 9.7 (CNA)9.7 / 10 × 3029.1Not in CISA KEV+300.0EPSS percentile 47.2.472 × 209.4Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:`. An attacker can exploit this to inject a malicious Model Context Protocol (MCP) server configuration, leading to Remote Code Execution (RCE) on the victim's machine when the node is clicked. Version 0.11.1 fixes the issue.

Affected

ProductAffectedFixed inSource
Dive< 0.11.1–CNA

Scores by source

GitHub_M (CNA)9.7CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: total

References

exploitgithub.com/OpenAgentPlatform/Dive/security/advisories/GHSA-xv8m-365j-x6h2