CVE-2025-66562 TUUI vulnerable to Remote Code Execution (RCE) via XSS in Markdown ECharts Rendering
Attackers can execute arbitrary system commands on victims' machines by exploiting an XSS flaw in Markdown rendering combined with an exposed IPC interface.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-66562?
CVE-2025-66562 is a high-severity code injection vulnerability in AI-QL tuui, published on 5 Dec 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
TUUI is a desktop MCP client designed as a tool unitary utility integration. Prior to 1.3.4, a critical Remote Code Execution (RCE) vulnerability exists in Tuui due to an unsafe Cross-Site Scripting (XSS) flaw in the Markdown rendering component. Tuui allows the execution of arbitrary JavaScript within ECharts code blocks. Combined with an exposed IPC interface that allows spawning processes, an attacker can execute arbitrary system commands on the victim's machine simply by having them view a malicious Markdown message. This vulnerability is fixed in 1.3.4.
Which versions are affected by CVE-2025-66562?
It affects 1 product.
Products include Aiql Tuui.
How do I fix CVE-2025-66562?
No fix has been published for CVE-2025-66562 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-66562 being exploited?
There is no known exploitation of CVE-2025-66562 in the wild and no public exploit code.
Sources
Also known as GHSA-qjhq-rgmr-6c3g.