CVE-2025-66481: DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are…
CVE-2025-66481 · Severity: critical · CVSS 9.6 · Published 2025-12-09
DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid content. The recent security patch for MermaidArtifact.vue is insufficient and can be bypassed using unquoted HTML attributes combined with HTML entity encoding. Remote Code Execution is possible on the victim's machine via the electron.ipcRenderer interface, bypassing the regex filter intended to strip dangerous attributes. There is no fix at time of publication.
No. Junglewise Threat Intelligence has no report of CVE-2025-66481 being exploited in the wild.
How severe is CVE-2025-66481?
Critical severity, with a CVSS score of 9.6, published 9 December 2025.
Which products and versions are affected?
Thinkinai Deepchat. The advisory does not name versions.
Is there a fix for CVE-2025-66481?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-66481?
Check whether you run Thinkinai Deepchat. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.