Openagentplatform Dive vulnerabilities

CVE-2025-58176 [HIGH] CWE-94 CVE-2025-58176: Dive is an open-source MCP Host Desktop Application that enables integration with function-calling L Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, `transport` in the JSON object. An attacker can exploit the vulnerability in the following two scenarios: a victim visits

CVE-2026-23523 [HIGH] CWE-94 CVE-2026-23523: Dive is an open-source MCP Host Desktop Application that enables integration with function-calling L Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0.

CVE-2025-66580 [CRITICAL] CWE-94 CVE-2025-66580: Dive is an open-source MCP Host Desktop Application that enables integration with function-calling L Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application allows the execution of arbitrary JavaScript via `javascript:`. An attacker can exploit thi