Skip to content
OpenAdvisories

Vendor

OpenAgentPlatform

3 known vulnerabilities.

Products

Dive 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.7
    CVE-2026-23523

    Dive allows One-click Remote Code Execution through Deep Links for MCP Install

    Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitra…

    OpenAgentPlatform Dive
  • Critical 9.7
    CVE-2025-66580

    Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution

    Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application …

    OpenAgentPlatform Dive