Vulnerability · Published Sep 17, 2025 · Assigned by GitHub_M

CVE-2025-58766Dyad Vulnerable to Remote Code Execution via Top-level Navigation in Preview Window

Critical 9.1

In plain English

A critical-severity code injection in dyad from dyad-sh. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)9.1Critical

Exploit odds (30 days)0.4%top 61.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later.

Affected products (as reported)

Vendor	Product	Versions
dyad-sh	dyad	< 0.20.0

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References

https://github.com/dyad-sh/dyad/security/advisories/GHSA-7fxm-c5xx-7vpq x_refsource_CONFIRM
https://github.com/dyad-sh/dyad/commit/1c0255ab126d3b38ae9e78b17cdab9a07e5f0185 x_refsource_MISC
https://github.com/dyad-sh/dyad/commit/ebcf89ee6cead83a33add5ef1e19c8d4f9b4ce9b x_refsource_MISC