Vulnerabilities

TI-2026-18947 CVE-2026-23523

Dive allows One-click Remote Code Execution through Deep Links for MCP Install

HIGH 76

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.07065 Published 2026-01-16 Fixed in 0.13.0 CWE-94

TI-2025-40989 CVE-2025-66580

HIGH 76

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs.

CVSS 3.1CRITICAL 9.7 Network No auth User interaction EPSS 0.0057 Published 2025-12-19 Fixed in 0.11.1 CWE-94

TI-2025-35984 CVE-2025-58176

HIGH 73

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.10047 Published 2025-09-03 Fixed in 0.9.4 CWE-94