Critical · published December 4, 2025
🚨 A stored XSS vulnerability in DeepChat could let an attacker run arbitrary JavaScript in the app— and that's just the start! 🔥 Think of it like a sneaky chef adding a secret ingredient to a restaurant's dish, but this ingredient is code that can take control of the entire kitchen. 🏪 Just like a chef who can quickly change recipes to something dangerous, an attacker can leverage this flaw to execute remote code at will. With this vulnerability, an attacker could gain complete control over the DeepChat application. They could steal sensitive information, manipulate data, or even take over the entire system, leading to absolutely devastating consequences for users and organizations alike!
Think of it like a sneaky chef adding a secret ingredient to a restaurant's dish, but this ingredient is code that can take control of the entire kitchen. 🏪 Just like a chef who can quickly change recipes to something dangerous, an attacker can leverage this flaw to execute remote code at will. This stored XSS vulnerability in the Mermaid diagram renderer allows attackers to inject malicious JavaScript, exploiting the Electron IPC bridge to escalate the attack to Remote Code Execution (RCE) by registering a malicious MCP server.
With this vulnerability, an attacker could gain complete control over the DeepChat application. They could steal sensitive information, manipulate data, or even take over the entire system, leading to absolutely devastating consequences for users and organizations alike! Update DeepChat to version 0.5.1 or later to patch this vulnerability. Additionally, audit input handling in the application to ensure that user-provided data is properly sanitized and validated. Security best practices must be integrated into future development to prevent similar issues. You've got this! Follow these steps, and you'll have DeepChat fortified in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| thinkinai/deepchat | ≤ 0.5.0 | — |