CVE-2026-22792 5ire vulnerable to Remote Code Execution (RCE)

Critical 9.7 Published 21 Jan 2026 Updated 21 Jan 2026

An attacker can inject malicious HTML to execute arbitrary JavaScript and commands in the 5ire desktop AI assistant via unsafe rendering.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2026-22792?

CVE-2026-22792 is a critical cross-site scripting vulnerability in nanbingxyz 5ire, published on 21 Jan 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `<img onerror=...>` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue.

Weakness: CWE-116

Which versions are affected by CVE-2026-22792?

It affects 1 product.

Products include 5ire 5ire.

How do I fix CVE-2026-22792?

No fix has been published for CVE-2026-22792 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2026-22792 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-22792 exists.

Sources

Also known as GHSA-p5fm-wm8g-rffx.