Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-23523: Dive desktop app can run commands via malicious link

CVE-2026-23523 · published 9 months ago

Summary

The Dive desktop application that connects to language models can be tricked by a specially crafted link to install a fake server configuration without clear user consent. This lets an attacker run any command on the user's computer. Upgrade to version 0.13.0 or later to stop the risk.

What to do

Update openagentplatform dive to version 0.13.0 or later.

Affected software

Vendor	Product	Affected versions
openagentplatform	dive	< 0.13.0 `cpe:2.3:a:openagentplatform:dive::::::::`

Original advisory text

Dive allows One-click Remote Code Execution through Deep Links for MCP Install

Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0.

References

https://github.com/OpenAgentPlatform/Dive/security/advisories/GHSA-pjj5-f3wm-f9m... Vendor Advisory
https://github.com/OpenAgentPlatform/Dive/commit/a5162ac9eff366d8ea1215b8a47139a... Patch
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23523... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-23523 Vendor Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

9.6 Critical

Exploitation

7% chance of attack within 30 days

Type

CWE-94Code Injection

Timeline

Published16 Jan 2026

Updated21 Oct 2026

First seen6 Mar 2026

Sources

CVE-2026-23523 · NVD

CVE-2026-23523 · OSV

GHSA-pjj5-f3wm-f9m8 · GHSA

Track software like this

Free during beta