CVE-2025-47777

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to insufficient sanitization. This, in turn, can lead to Remote Code Execution (RCE) via unsafe Electron protocol handling and exposed Electron APIs. All users of 5ire client versions prior to patched releases, particularly those interacting with untrusted chatbots or pasting external content, are affected. Version 0.11.1 contains a patch for the issue.

CVSS v3 9.6 CRITICAL

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/nanbingxyz/5ire/commit/56601e012095194a4be0d4cb6da6b5b3cb53dea8	Patch
https://github.com/nanbingxyz/5ire/security/advisories/GHSA-mr8w-mmvv-6hq8	Vendor Advisory
https://positive.security/blog/url-open-rce	Not Applicable
https://shabarkin.notion.site/1-click-RCE-in-Electron-Applications-501c2e96e7934610979cd3c72e844a22	Not Applicable
https://www.electronjs.org/docs/latest/tutorial/security	Not Applicable
https://www.youtube.com/watch?v=ROFYhS9E9eU	Exploit

Configurations

Configuration 1 (hide)

cpe:2.3:a:5ire:5ire:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-05-14 16:15

Updated : 2026-01-22 21:26

NVD link : CVE-2025-47777

Mitre link : CVE-2025-47777

CVE.ORG link : CVE-2025-47777

JSON object : View

Products Affected

5ire

5ire

CWE

CWE-20

Improper Input Validation

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

{"id": "CVE-2025-47777", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "published": "2025-05-14T16:15:28.957", "references": [{"url": "https://github.com/nanbingxyz/5ire/commit/56601e012095194a4be0d4cb6da6b5b3cb53dea8", "tags": ["Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/nanbingxyz/5ire/security/advisories/GHSA-mr8w-mmvv-6hq8", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}, {"url": "https://positive.security/blog/url-open-rce", "tags": ["Not Applicable"], "source": "security-advisories@github.com"}, {"url": "https://shabarkin.notion.site/1-click-RCE-in-Electron-Applications-501c2e96e7934610979cd3c72e844a22", "tags": ["Not Applicable"], "source": "security-advisories@github.com"}, {"url": "https://www.electronjs.org/docs/latest/tutorial/security", "tags": ["Not Applicable"], "source": "security-advisories@github.com"}, {"url": "https://www.youtube.com/watch?v=ROFYhS9E9eU", "tags": ["Exploit"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-20"}, {"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Versions prior to 0.11.1 are vulnerable to stored cross-site scripting in chatbot responses due to insufficient sanitization. This, in turn, can lead to Remote Code Execution (RCE) via unsafe Electron protocol handling and exposed Electron APIs. All users of 5ire client versions prior to patched releases, particularly those interacting with untrusted chatbots or pasting external content, are affected. Version 0.11.1 contains a patch for the issue."}, {"lang": "es", "value": "5ire es un asistente de inteligencia artificial multiplataforma de escritorio y un cliente de protocolo de contexto de modelo. Las versiones anteriores a la 0.11.1 son vulnerables a cross-site scripting almacenado en las respuestas de los chatbots debido a una limpieza insuficiente. Esto, a su vez, puede provocar la ejecuci\u00f3n remota de c\u00f3digo (RCE) mediante la gesti\u00f3n insegura del protocolo Electron y la exposici\u00f3n de las API de Electron. Todos los usuarios de versiones del cliente 5ire anteriores a las actualizaciones, en particular aquellos que interact\u00faan con chatbots no confiables o comparten contenido externo, se ven afectados. La versi\u00f3n 0.11.1 incluye un parche para este problema."}], "lastModified": "2026-01-22T21:26:26.727", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:5ire:5ire:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E8192816-BD96-421F-9F21-C7D2571B692A", "versionEndExcluding": "0.11.1"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}