PT-2025-21176 · 5Ire+1 · 5Ire+1

Published 2025-05-14 · Updated 2025-05-19 · CVE-2025-47777

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: 5ire versions prior to 0.11.1

Description: The issue is related to stored cross-site scripting in chatbot responses due to insufficient sanitization, which can lead to Remote Code Execution (RCE) via unsafe Electron protocol handling and exposed Electron APIs. Users of 5ire client versions prior to the patched release, particularly those interacting with untrusted chatbots or pasting external content, are affected.

Recommendations: For versions prior to 0.11.1, update to version 0.11.1 or later, which contains a patch for the issue. As a temporary workaround, consider avoiding interactions with untrusted chatbots and refraining from pasting external content until the update is applied. Restrict access to exposed Electron APIs to minimize the risk of exploitation.

Exploit

Fix

RCE

XSS

Weakness Enumeration

CWE-79

CWE-20

Related Identifiers

CVE-2025-47777

GHSA-MR8W-MMVV-6HQ8

Affected Products

5Ire

Electron

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47777.json · Exploit
• 🔥 https://youtube.com/watch?v=ROFYhS9E9eU · Exploit
• https://github.com/nanbingxyz/5ire/security/advisories/GHSA-mr8w-mmvv-6hq8 · Vendor Advisory
• https://github.com/nanbingxyz/5ire/commit/56601e012095194a4be0d4cb6da6b5b3cb53dea8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-47777 · Security Note
• https://osv.dev/vulnerability/CVE-2025-47777 · Vendor Advisory
• https://electronjs.org/docs/latest/tutorial/security · Note
• https://t.me/latest_high_impact_cve/2366 · Telegram Post
• https://twitter.com/CVEnew/status/1922695630025261565 · Twitter Post
• https://shabarkin.notion.site/1-click-RCE-in-Electron-Applications-501c2e96e7934610979cd3c72e844a22 · Note
• https://twitter.com/CveFindCom/status/1922684309355278654 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1922710474367307788 · Twitter Post
• https://t.me/cvetracker/23844 · Telegram Post
• https://twitter.com/cracbot/status/1924419859808477604 · Twitter Post
• https://positive.security/blog/url-open-rce · Note