Threats affecting pkg:github/thinkinaixyz/deepchat

CVE-2026-43899 is a critical vulnerability in ThinkInAIXYZ's DeepChat platform prior to version 1.0.4-beta.1. It involves improper input validation that allows an attacker or compromised AI endpoint to bypass security restrictions and execute arbitrary protocols via Electron's native pop-up window handlers. Specifically, malicious Markdown links with target="_blank" can trigger shell.openExternal(url) calls without proper URL validation, leading to remote code execution. This issue was introduced due to an incomplete mitigation of a previous vulnerability (CVE-2025-55733). The vulnerability is fixed in DeepChat version 1.0.

CVE-2026-43900 is a critical Cross-Site Scripting (XSS) vulnerability in ThinkInAIXYZ deepchat versions prior to 1.0.4-beta.1. It arises from improper input neutralization during web page generation, specifically in the SVG sanitizer component. The vulnerability allows an attacker to bypass the sanitizer by using obfuscated HTML entities, leading to arbitrary JavaScript execution when a victim interacts with a crafted SVG element. This issue is fixed in version 1.0.4-beta.1.

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to version 0.5.3, a security vulnerability exists in the Mermaid diagram rendering component that allows arbitrary JavaScript execution. Due to the exposure of the Electron IPC renderer to the DOM, this Cross-Site Scripting (XSS) flaw escalates to full Remote Code Execution (RCE), allowing an attacker to execute arbitrary system commands. Two concurrent issues, unsafe Mermaid configuration and an exposed IPC interface, cause this issue. Version 0.5.3 contains a patch.

DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid content. The recent security patch for MermaidArtifact.vue is insufficient and can be bypassed using unquoted HTML attributes combined with HTML entity encoding. Remote Code Execution is possible on the victim's machine via the electron.ipcRenderer interface, bypassing the regex filter intended to strip dangerous attributes. There is no fix at time of publication.

CVE-2025-66222 is a critical vulnerability in ThinkInAIXYZ's DeepChat versions prior to 0.5.0, involving a stored Cross-Site Scripting (XSS) flaw in the Mermaid diagram renderer. This XSS vulnerability allows attackers to execute arbitrary JavaScript within the application context. Exploiting the exposed Electron IPC bridge, attackers can escalate this to Remote Code Execution (RCE) by registering and starting a malicious Model Context Protocol (MCP) server. The vulnerability has a CVSS score of 9.7, indicating high impact on confidentiality, integrity, and availability without requiring privileges but needing user interaction. European organizations using DeepChat in sensitive environments face significant risks including data breaches, system compromise, and operational disruption. Mitigation requires immediate upgrading beyond version 0.5.