CVE-2025-58768
Last modified
CVE-2025-58768 is a critical-severity vulnerability rated 9.6/10 on the CVSS scale. DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using `innerHTML` to set user content. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using `innerHTML` to set user content. Therefore, any malicious content rendered via Mermaid will directly trigger the exploit chain, leading to command execution. This vulnerability is primarily caused by a failure to fully address the existing XSS issue in the project, leading to another exploit chain. The exploit chain is consistent with the report GHSA-hqr4-4gfc-5p2j, executing arbitrary JavaScript code via XSS and arbitrary commands via exposed IPC. Version 0.3.5 contains an updated fix.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Thinkinai | Deepchat | < 0.3.5 |
References
- https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-f7q5-vc93-wp6jExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-58768?
How severe is CVE-2025-58768?
How do I fix CVE-2025-58768?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-58762Tautulli is a Python based monitoring and tracking tool for …7.2
- CVE-2025-58763Tautulli is a Python based monitoring and tracking tool for …7.2
- CVE-2025-58764Claude Code is an agentic coding tool. Due to an error in co…9.8
- CVE-2025-58765wabac.js provides a full web archive replay system, or 'wayb…7.1
- CVE-2025-58766Dyad is a local AI app builder. A critical security vulnerab…9
- CVE-2025-58767REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 …5.3
- CVE-2025-58769auth0-PHP is an SDK for Auth0 Authentication and Management …3.3
- CVE-2025-5877A vulnerability, which was classified as problematic, has be…8.1
- CVE-2025-58770APTIOV contains a vulnerability in BIOS where a user may cau…8.8
- CVE-2025-58775KV STUDIO and VT5-WX15/WX12 contain a stack-based buffer ove…8.4
- CVE-2025-58776KV Studio versions 12.23 and prior contain a stack-based buf…8.4
- CVE-2025-58777VT Studio versions 8.53 and prior contain an access of unini…7.8
Are you affected by CVE-2025-58768?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST