PT-2025-48981 · Deepchat · Deepchat

Published 2025-12-03 · Updated 2025-12-31 · CVE-2025-66222

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions DeepChat versions prior to 0.5.0

Description DeepChat, an AI smart assistant, contains a Stored Cross-Site Scripting (XSS) issue within the Mermaid diagram renderer. This allows an attacker to execute arbitrary JavaScript code within the application's context. Exploitation of this XSS can be escalated to Remote Code Execution (RCE) by registering and initiating a malicious Model Context Protocol (MCP) server, leveraging the exposed Electron IPC bridge.

Recommendations Update DeepChat to version 0.5.0 or later.

Exploit

Fix

RCE

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-66222

GHSA-V8V5-C872-MF8R

Affected Products

Deepchat

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/66xxx/CVE-2025-66222.json · Exploit
• https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-v8v5-c872-mf8r · Vendor Advisory
• https://github.com/ThinkInAIXYZ/deepchat/commit/371ca7b42e3685aee6e3f0c61e85277ed1ff4db7 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-66222 · Security Note
• https://osv.dev/vulnerability/CVE-2025-66222 · Vendor Advisory
• https://t.me/cveNotify/144895 · Telegram Post
• https://t.me/CVEtracker/38780 · Telegram Post
• https://twitter.com/0dayPublishing/status/1996292152838463540 · Twitter Post
• https://twitter.com/CVEnew/status/1996291984894345393 · Twitter Post
• https://twitter.com/SecReportCVE/status/2006382437803151592 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1996369940048117991 · Twitter Post
• https://twitter.com/dailycve/status/1996996240387527022 · Twitter Post
• https://twitter.com/offseq/status/1996414734225272871 · Twitter Post
• https://twitter.com/CveFindCom/status/1996303399944388839 · Twitter Post