CVE-2025-55733 DeepChat One-click Remote Code Execution through Custom URL Handling

Critical 9.7 Published 19 Aug 2025 Updated 19 Aug 2025

An attacker can achieve remote code execution by tricking users into visiting a webpage with a malicious deepchat: URL that triggers the application's custom handler.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2025-55733?

CVE-2025-55733 is a critical code injection vulnerability in ThinkInAIXYZ deepchat, published on 19 Aug 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

DeepChat is a smart assistant that connects powerful AI to your personal world. DeepChat before 0.3.1 has a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted deepchat: URL on any website, including a malicious one they control. When a victim visits such a site or clicks on the link, the browser triggers the app’s custom URL handler (deepchat:), causing the DeepChat application to launch and process the URL, leading to remote code execution on the victim’s machine. This vulnerability is fixed in 0.3.1.

Weakness: CWE-94

Which versions are affected by CVE-2025-55733?

It affects 1 product.

Products include Thinkinai Deepchat.

How do I fix CVE-2025-55733?

No fix has been published for CVE-2025-55733 yet. Limit exposure of the affected software until one is available.

Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.

Is CVE-2025-55733 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-55733 exists.

Sources

Also known as GHSA-hqr4-4gfc-5p2j.