OpenAgentPlatform Dive up to 0.9.3 deeplink.ts code injection

Summaryinfo

A vulnerability identified as critical has been detected in OpenAgentPlatform Dive up to 0.9.3. This vulnerability affects unknown code of the file Dive/electron/main/deeplink.ts. Performing a manipulation results in code injection. This vulnerability is cataloged as CVE-2025-58176. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in OpenAgentPlatform Dive up to 0.9.3. This affects some unknown functionality of the file Dive/electron/main/deeplink.ts. The manipulation with an unknown input leads to a code injection vulnerability. CWE is classifying the issue as CWE-94. The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, `transport` in the JSON object. An attacker can exploit the vulnerability in the following two scenarios: a victim visits a malicious website controlled by the attacker and the website redirect to the URL automatically, or a victim clicks on such a crafted link embedded on a legitimate website (e.g., in user-generated content). In both cases, the browser invokes Dive's custom URL handler (dive:), which launches the Dive app and processes the crafted URL, leading to arbitrary code execution on the victim’s machine. This vulnerability is caused by improper processing of custom url. This is fixed in version 0.9.4.

The advisory is shared at gist.github.com. This vulnerability is uniquely identified as CVE-2025-58176. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1059 for this issue.

The exploit is shared for download at github.com. It is declared as proof-of-concept.

Upgrading to version 0.9.4 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• OpenAgentPlatform

Name

• Dive

Version

• 0.9.0
• 0.9.1
• 0.9.2
• 0.9.3

Website

• Product: https://github.com/OpenAgentPlatform/Dive/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #642824: Dive v0.9.3 Command Injection (by Jianjia Yu)

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion