CVE-2025-58768 DeepChat's Mermaid rendering has XSS leading to RCE

What is CVE-2025-58768?

CVE-2025-58768 is a critical vulnerability in ThinkInAIXYZ deepchat, published on 9 Sep 2025.

Official description

DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using `innerHTML` to set user content. Therefore, any malicious content rendered via Mermaid will directly trigger the exploit chain, leading to command execution. This vulnerability is primarily caused by a failure to fully address the existing XSS issue in the project, leading to another exploit chain. The exploit chain is consistent with the report GHSA-hqr4-4gfc-5p2j, executing arbitrary JavaScript code via XSS and arbitrary commands via exposed IPC. Version 0.3.5 contains an updated fix.

Weakness: CWE-79, CWE-94

Which versions are affected by CVE-2025-58768?

It affects 1 product.

Products include Thinkinai Deepchat.

How do I fix CVE-2025-58768?

No fix has been published for CVE-2025-58768 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-58768 being exploited?

There is no known exploitation of CVE-2025-58768 in the wild and no public exploit code.

Other vulnerabilities in ThinkInAIXYZ deepchat

• CVE-2025-67744 Mermaid XSS vulnerability leads to Remote Code Execution Critical 9.7
• CVE-2025-66481 DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content Critical 9.7
• CVE-2025-66222 DeepChat Cross-Site Scripting(XSS) escalate to Remote Code Execution(RCE) Critical 9.7
• CVE-2025-55733 DeepChat One-click Remote Code Execution through Custom URL Handling Critical 9.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-f7q5-vc93-wp6j.