Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-43899: DeepChat: Unsecured AI Agent Platform Open to Attack

CVE-2026-43899

Summary

DeepChat's open-source AI platform was vulnerable to attacks that could bypass security controls and execute malicious code. This issue has been fixed in version 1.0.4-beta.1, so it's essential to update to the latest version to ensure the security of your system. If you're using an earlier version, consider updating immediately.

Original title

Original description

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves DeepChat vulnerable to an arbitrary protocol execution bypass (RCE). While the patch correctly restricted api.openExternal() inside the renderer's preload/index.ts script, it structurally neglected to sanitize native Electron pop-up window handlers. An attacker or a compromised AI endpoint returning a Markdown link can trigger a target="_blank" native window interception in tabPresenter.ts, which forwards the malicious URL directly to shell.openExternal(url) and completely bypasses the isValidExternalUrl security boundary. This vulnerability is fixed in v1.0.4-beta.1.

nvd CVSS3.1 9.6

Vulnerability type

CWE-20 Improper Input Validation

https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-cp8j-jx7q-7r5f

Published: 11 May 2026 · Updated: 28 May 2026 · First seen: 11 May 2026