CVE-2025-66481: DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content
DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid content. The recent security patch for MermaidArtifact.vue is insufficient and can be bypassed using unquoted HTML attributes combined with HTML entity encoding. Remote Code Execution is possible on the victim's machine via the electron.ipcRenderer interface, bypassing the regex filter intended to strip dangerous attributes. There is no fix at time of publication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-66481?
CVE-2025-66481 has been classified as a high-severity vulnerability due to its potential for XSS exploits.
How do I fix CVE-2025-66481?
To fix CVE-2025-66481, upgrade DeepChat to version 0.5.2 or later, which includes proper sanitization for Mermaid content.
What types of attacks can CVE-2025-66481 facilitate?
CVE-2025-66481 can facilitate cross-site scripting (XSS) attacks through improperly sanitized Mermaid content.
Which versions of DeepChat are affected by CVE-2025-66481?
CVE-2025-66481 affects DeepChat versions 0.5.1 and below.
Is there a workaround for CVE-2025-66481 until I can upgrade?
As a temporary workaround for CVE-2025-66481, avoid using Mermaid content in your applications until the upgrade can be completed.