Vulnerability · Published Dec 19, 2025 · Assigned by GitHub_M
CVE-2025-66580Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution
Critical 9.7
In plain English
A critical-severity code injection in Dive from OpenAgentPlatform. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 47% of all known vulnerabilities).
Official description
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:`. An attacker can exploit this to inject a malicious Model Context Protocol (MCP) server configuration, leading to Remote Code Execution (RCE) on the victim's machine when the node is clicked. Version 0.11.1 fixes the issue.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenAgentPlatform | Dive | < 0.11.1 |
Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H