CVE-2025-50733

NextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of artifacts.tsx that allows attackers to execute arbitrary JavaScript code when HTML content is rendered in the AI chat interface. The vulnerability occurs because user-influenced HTML from AI responses is rendered in an iframe with 'allow-scripts' sandbox permission without proper sanitization. This can be exploited through specifically crafted prompts that cause the AI to generate malicious HTML/JavaScript code. When a user views the HTML preview, the injected JavaScript executes in the user's browser context, potentially allowing attackers to exfiltrate sensitive information (including API keys stored in localStorage), perform actions on behalf of the user, and steal session data.

• CWE-79

• https://github.com/fai1424/Vulnerability-Research/blob/main/CVE-2025-50733/README.md
• https://hackmd.io/@fai1424/BkgqMnNxgl
• https://github.com/fai1424/Vulnerability-Research/blob/main/CVE-2025-50733/README.md

Published

Aug 22, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-50708An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote att…7.5
• CVE-2025-50709An issue in Perplexity AI GPT-4 allows a remote attacker to …4.3
• CVE-2025-5071The AI Engine plugin for WordPress is vulnerable to unauthor…8.8
• CVE-2025-5072Resource leak vulnerability in ASR180x、ASR190x in con_mgr al…5.3
• CVE-2025-50722Insecure Permissions vulnerability in sparkshop v.1.1.7 allo…9.8
• CVE-2025-5073A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-50735Directory traversal vulnerability in NextChat thru 2.16.0 du…7.5
• CVE-2025-50736An open redirect vulnerability exists in Byaidu PDFMathTrans…6.1
• CVE-2025-50738The Memos application, up to version v0.24.3, allows for the…9.8
• CVE-2025-50739iib0011 omni-tools v0.4.0 is vulnerable to remote code execu…9.8
• CVE-2025-5074A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-50740AutoConnect 1.4.2, an Arduino library, is vulnerable to a cr…6.1