{"id":"CVE-2026-22792","aliases":["EUVD-2026-3778","GHSA-p5fm-wm8g-rffx"],"status":"published","title":"5ire vulnerable to Remote Code Execution (RCE)","description":"5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `\u003cimg onerror=...\u003e` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue.","severity":{"version":"3.1","score":9.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00851,"percentile":0.58462,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-116"],"published":"2026-01-21T20:54:18Z","modified":"2026-10-28T02:30:32Z","products":[{"vendor":"5ire","product":"5ire"},{"vendor":"nanbingxyz","product":"5ire"}],"references":[{"url":"https://github.com/nanbingxyz/5ire/security/advisories/GHSA-p5fm-wm8g-rffx","tags":["x_refsource_CONFIRM","Exploit","Vendor Advisory","advisory"]},{"url":"https://github.com/nanbingxyz/5ire/releases/tag/v0.15.3","tags":["x_refsource_MISC","Release Notes","web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22792.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-22792","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-22792","title":"5ire vulnerable to Remote Code Execution (RCE)","description":"5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `\u003cimg onerror=...\u003e` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue.","status":"published","published":"2026-01-21T20:54:18.108Z","modified":"2026-01-21T21:26:47.676Z","cvss":[{"version":"3.1","score":9.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T13:39:16.730222Z"}],"euvd":[{"id":"EUVD-2026-3778","description":"5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `\u003cimg onerror=...\u003e` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue.","status":"published","published":"2026-01-21T20:54:18Z","modified":"2026-01-21T21:26:47Z","cvss":[{"version":"3.1","score":9.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:48.974823Z"}],"nvd":[{"id":"CVE-2026-22792","description":"5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `\u003cimg onerror=...\u003e` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue.","status":"published","published":"2026-01-21T21:16:09.957Z","modified":"2026-06-17T10:20:26.193Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T14:12:04.423757Z"}],"osv":[{"id":"CVE-2026-22792","title":"5ire vulnerable to Remote Code Execution (RCE)","description":"5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML (including on* event attributes) to execute in the renderer context. An attacker can inject an `\u003cimg onerror=...\u003e` payload to run arbitrary JavaScript in the renderer, which can call exposed bridge APIs such as `window.bridge.mcpServersManager.createServer`. This enables unauthorized creation of MCP servers and lead to remote command execution. Version 0.15.3 fixes the issue.","status":"published","published":"2026-01-21T20:54:18.108Z","modified":"2026-10-28T02:30:32.22636221Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-116"],"updated_at":"2026-11-02T15:44:58.749922Z"}]}}