Platform
javascript
Component
deepchat
Fixed in
0.5.1
CVE-2025-66222 describes a Stored Cross-Site Scripting (XSS) vulnerability within DeepChat, a smart assistant leveraging artificial intelligence. This vulnerability, present in versions 0.0.0 through 0.4.9, allows attackers to inject and execute malicious JavaScript code. Exploitation can be escalated to Remote Code Execution (RCE) by leveraging the Electron IPC bridge to register and start a malicious Model Context Protocol (MCP) server. A fix is available in version 0.5.0.
The XSS vulnerability in DeepChat allows an attacker to inject malicious scripts into the application's Mermaid diagram rendering. This injected script can then be executed within the context of the DeepChat application, potentially stealing user credentials, modifying application behavior, or redirecting users to malicious websites. The critical aspect of this vulnerability is the potential for escalation to Remote Code Execution (RCE). By exploiting the Electron IPC bridge, an attacker can register and start a malicious MCP server, effectively gaining control over the application and potentially the underlying system. This represents a significant security risk, particularly in environments where DeepChat is used to process sensitive data or interact with critical systems. The blast radius extends to all users interacting with the Mermaid diagrams within DeepChat.
CVE-2025-66222 was publicly disclosed on December 3, 2025. The vulnerability's combination of XSS and RCE potential warrants careful attention. While no public proof-of-concept (POC) has been released as of this writing, the potential for RCE makes it a high-priority vulnerability. The EPSS score is likely to be assessed as medium to high, reflecting the potential for significant impact. Monitor security advisories and threat intelligence feeds for any indications of active exploitation.
Exploit Status
EPSS
0.27% (50% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2025-66222 is to immediately upgrade DeepChat to version 0.5.0 or later, which contains the fix for the XSS vulnerability. If upgrading is not immediately feasible, consider implementing temporary workarounds. Input sanitization on user-provided data used in Mermaid diagrams can help prevent the injection of malicious scripts. Restrict access to the Electron IPC bridge to only trusted sources. Monitor DeepChat logs for suspicious activity, particularly related to MCP server registration and execution. After upgrading, confirm the fix by attempting to inject a simple JavaScript payload into a Mermaid diagram and verifying that it is not executed.
Actualice DeepChat a la versión 0.5.0 o posterior. Esta versión contiene una corrección para la vulnerabilidad XSS que podría permitir la ejecución remota de código. La actualización mitigará el riesgo de que un atacante explote esta vulnerabilidad.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2025-66222 is a critical vulnerability in DeepChat versions 0.0.0 through 0.4.9 that allows attackers to execute JavaScript, potentially leading to Remote Code Execution (RCE) through the Electron IPC bridge.
If you are using DeepChat versions 0.0.0 through 0.4.9 and utilize the Mermaid diagram rendering functionality, you are potentially affected by this vulnerability.
Upgrade DeepChat to version 0.5.0 or later to address the XSS vulnerability and prevent potential RCE exploitation. Implement input sanitization as a temporary workaround if immediate upgrade is not possible.
While no active exploitation has been confirmed as of December 3, 2025, the potential for RCE makes it a high-priority vulnerability to monitor.
Refer to the DeepChat project's official website or security advisory channels for the latest information and updates regarding CVE-2025-66222.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.