CVE-2025-66580

Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution

State: Published
Severity: 9.7 Critical
Published: Dec 19, 2025
Updated: Dec 19, 2025
Reserved: Dec 4, 2025

Description

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:`. An attacker can exploit this to inject a malicious Model Context Protocol (MCP) server configuration, leading to Remote Code Execution (RCE) on the victim's machine when the node is clicked. Version 0.11.1 fixes the issue.

Scores

CVSS	Score	Vector	Source
3.1	9.7 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-94 Improper Control of Generation of Code ('Code Injection')

Affected Products

Product	Versions
DiveOpenAgentPlatform	< 0.11.1Affected

References

https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-xv8m-365j-x6h2

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.