Platform
javascript
Component
5ire
Fixed in
0.15.4
CVE-2026-22793 describes a critical Remote Code Execution (RCE) vulnerability discovered in 5ire, a cross-platform AI assistant. This vulnerability stems from an unsafe option parsing flaw within the ECharts Markdown plugin, enabling attackers to execute arbitrary JavaScript code. The vulnerability impacts versions of 5ire prior to 0.15.3, and a patch is available in version 0.15.3.
The impact of CVE-2026-22793 is severe. An attacker who can submit ECharts code blocks can leverage the unsafe option parsing to execute arbitrary JavaScript code within the renderer context. This is particularly dangerous because 5ire utilizes Electron, which exposes privileged APIs like electron.mcp. Successful exploitation could allow an attacker to gain full control of the host system, including access to sensitive data, installation of malware, and lateral movement within the network. This vulnerability shares similarities with other JavaScript parsing vulnerabilities where malicious code injection can lead to complete system compromise.
CVE-2026-22793 was publicly disclosed on January 21, 2026. The vulnerability's criticality (CVSS 9.7) and the potential for full system compromise suggest a high probability of exploitation. No public proof-of-concept (POC) code has been released as of this writing, but the ease of exploitation given the vulnerability type makes it likely that one will emerge. It is not currently listed on the CISA KEV catalog.
Exploit Status
EPSS
0.30% (53% percentile)
CISA SSVC
CVSS Vector
The primary mitigation for CVE-2026-22793 is to immediately upgrade 5ire to version 0.15.3 or later. If upgrading is not immediately feasible, consider restricting user input of ECharts code blocks to trusted sources only. While a direct workaround is unavailable, implementing strict input validation and sanitization for ECharts code can reduce the attack surface. Monitor system logs for unusual JavaScript execution patterns. After upgrading, confirm the fix by attempting to submit a malicious ECharts code block and verifying that it is properly sanitized and does not execute.
Actualice 5ire a la versión 0.15.3 o superior. Esta versión corrige la vulnerabilidad de ejecución remota de código (RCE) en el plugin ECharts Markdown. La actualización evitará la ejecución de código JavaScript arbitrario a través de bloques de código ECharts.
Vulnerability analysis and critical alerts directly to your inbox.
CVE-2026-22793 is a CRITICAL RCE vulnerability in 5ire versions before 0.15.3. An unsafe parsing flaw in the ECharts Markdown plugin allows attackers to execute JavaScript code, potentially compromising the host system.
Yes, if you are using 5ire version 0.15.3 or earlier, you are vulnerable to this RCE vulnerability. Upgrade immediately.
Upgrade 5ire to version 0.15.3 or later. If upgrading is not possible, restrict user input of ECharts code blocks to trusted sources.
While no public exploits are currently known, the vulnerability's severity and ease of exploitation suggest a high likelihood of future exploitation.
Refer to the 5ire security advisories page for the latest information and official guidance regarding CVE-2026-22793.
Upload your dependency file and we'll tell you instantly if this and other CVEs hit you.