CVE-2026-108852 Deep Chat through 2.5.1 XSS via Markdown Link Validation Bypass
Attackers can execute arbitrary JavaScript in the embedding page by injecting malicious Markdown links into AI responses or chat history.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2026-108852?
CVE-2026-108852 is a low-severity cross-site scripting vulnerability in OvidijusParsiunas Deep Chat, published on 11 Oct 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Deep Chat through 2.5.1 contains a cross-site scripting vulnerability that allows attackers to inject javascript: links because RemarkableConfig.createNew disables Remarkable link validation. Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them.
Weakness: CWE-79
Which versions are affected by CVE-2026-108852?
How do I fix CVE-2026-108852?
No fix has been published for CVE-2026-108852 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2026-108852 being exploited?
There is no known exploitation of CVE-2026-108852 in the wild and no public exploit code.
Sources
Also known as GHSA-qvgf-g4p8-x92p.