CVE-2025-58176 Dive's improper processing of custom urls can lead to Remote Code Execution
Attackers can achieve remote code execution on Dive desktop app users via malicious custom URL links or redirects.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-58176?
CVE-2025-58176 is a high-severity code injection vulnerability in OpenAgentPlatform Dive, published on 3 Sep 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, `transport` in the JSON object. An attacker can exploit the vulnerability in the following two scenarios: a victim visits a malicious website controlled by the attacker and the website redirect to the URL automatically, or a victim clicks on such a crafted link embedded on a legitimate website (e.g., in user-generated content). In both cases, the browser invokes Dive's custom URL handler (dive:), which launches the Dive app and processes the crafted URL, leading to arbitrary code execution on the victim’s machine. This vulnerability is caused by improper processing of custom url. This is fixed in version 0.9.4.
Weakness: CWE-94
Which versions are affected by CVE-2025-58176?
It affects 1 product.
Products include Openagentplatform Dive.
How do I fix CVE-2025-58176?
No fix has been published for CVE-2025-58176 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-58176 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-58176 exists.
Other vulnerabilities in OpenAgentPlatform Dive
Sources
Also known as GHSA-2r34-7pgx-vvrc.