PT-2025-30428 · Chaindesk · Chaindesk

Published 2025-07-22 · Updated 2025-07-22 · CVE-2025-51859

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Chaindesk versions through 2025-05-26

Description A stored Cross-Site Scripting (XSS) vulnerability exists in the agent chat component. An attacker can execute arbitrary client-side scripts by creating an AI agent with a system prompt designed to embed malicious script payloads, such as SVG-based XSS, into chat responses. When a user interacts with the malicious agent or accesses a direct link to a conversation containing the XSS payload, the script executes in the user's browser. Successful exploitation may lead to the theft of sensitive information, such as JWT session tokens, potentially resulting in account hijacking.

Recommendations Versions through 2025-05-26 should be updated or patched as soon as possible. Consider implementing strict input validation and sanitization for all AI agent system prompts to prevent the injection of malicious scripts.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-51859

Affected Products

Chaindesk

References · 3

• 🔥 https://github.com/Secsys-FDU/CVE-2025-51859 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51859 · Security Note
• https://twitter.com/CVEnew/status/1947677513775247571 · Twitter Post