Read the docs
TI-2025-40724 Aliases CVE-2025-66222

DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE)

Priority HIGH 76CWE-94Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Code execution, Cross-site scripting
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-94 and CWE-79.

Summary

DeepChat is a smart assistant uses artificial intelligence. In 0.5.0 and earlier, there is a Stored Cross-Site Scripting (XSS) vulnerability in the Mermaid diagram renderer allows an attacker to execute arbitrary JavaScript within the application context. By leveraging the exposed Electron IPC bridge, this XSS can be escalated to Remote Code Execution (RCE) by registering and starting a malicious MCP (Model Context Protocol) server.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00651 51st percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed deepchat (ThinkInAIXYZ): 0.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ThinkInAIXYZdeepchatbefore 0.5.00.5.0Patch availableCNA
  • deepchat VendorThinkInAIXYZ Affected before 0.5.0 Fixed in 0.5.0 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:thinkinai:deepchat:*:*:*:*:*:*:*:*up to 0.5.0VulnerableThinkInAIXYZ
  • cpe:2.3:a:thinkinai:deepchat:*:*:*:*:*:*:*:* Versions up to 0.5.0 Vulnerable ·ThinkInAIXYZ

Remediation

  • Fix · CNA deepchat (ThinkInAIXYZ) Fixed in 0.5.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-66222
  2. 2026-11-03 EPSS moved to the 50th–90th percentile

References

Exploit 1

Patch 1

  • TI-2025-41440 Mermaid XSS vulnerability leads to Remote Code Execution CVSS 3.1CRITICAL 9.7
  • TI-2025-40905 DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content CVSS 3.1CRITICAL 9.7
  • TI-2025-35154 DeepChat One-click Remote Code Execution through Custom URL Handling CVSS 3.1CRITICAL 9.7
  • TI-2025-36426 DeepChat's Mermaid rendering has XSS leading to RCE CVSS 3.1CRITICAL 9.7

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences