Beveiligingsadvies

CVE-2025-68669

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-23 22:51:35

Laatst bijgewerkt 2026-02-06 19:29:07

Toegewezen door GitHub_M

CVSS-score 9.7

Status PUBLISHED

Beschrijving

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.ts, where the markdown-it-mermaid plugin is initialized with securityLevel: 'loose'. This configuration explicitly permits the rendering of HTML tags within Mermaid diagram nodes. This issue has not been patched at time of publication.

← Alle CVE's bekijken Bekijk op cve.org ↗