CVE-2025-58766 Dyad Vulnerable to Remote Code Execution via Top-level Navigation in Preview Window
Attackers can execute arbitrary code on user systems by crafting malicious web content that bypasses security boundaries in the preview window.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-58766?
CVE-2025-58766 is a critical code injection vulnerability in dyad-sh dyad, published on 17 Sep 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later.
Weakness: CWE-94
Which versions are affected by CVE-2025-58766?
How do I fix CVE-2025-58766?
No fix has been published for CVE-2025-58766 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-58766 being exploited?
There is no known exploitation of CVE-2025-58766 in the wild and no public exploit code.
Sources
Also known as GHSA-7fxm-c5xx-7vpq.