Skip to content
OpenAdvisories

Vendor

OpenAgentPlatform

3 known vulnerabilities.

Products

Dive 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-58176 EPSS 10%

    Dive's improper processing of custom urls can lead to Remote Code Execution

    Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, `transport` in the JSON ob…

    OpenAgentPlatform Dive