CVE-2026-23523: Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an…

PriorityP260high8.8CVSS 3.1

AVNACLPRNUIRSUCHIHAH

EPSS

6.30%

92.7th percentile

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
openagentplatform	dive	< 0.13.0	0.13.0

Detection & IOCsextracted from sources · hover to see the quote

·A public exploit is reported to exist for this vulnerability, increasing urgency for detection and patching of Dive versions prior to 0.13.0. ↗
·The fix was added to Homebrew and Nix package managers on February 11, 2026; environments relying on these package managers should verify they have pulled the updated version. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.