Thinkinai
Thinkinai Deepchat: vulnerabilities and CVEs
Thinkinai Deepchat has 7 published vulnerabilities, 5 of them in the last 12 months. 7 are rated critical and 0 are listed by CISA as actively exploited.
CVEs7
Last 12 months5
Critical7
Actively exploited0
All vulnerabilities in the catalogue →⭐ Follow this technology
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-43900 | Critical (9.3) | 0.50% | — | May 11, 2026 | DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, a Cross-Site Scripting (XSS) vulnerability exists due to a discrepancy between the… |
| CVE-2026-43899 | Critical (9.6) | 0.56% | — | May 11, 2026 | DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves DeepChat vulnerable to an arbitrary… |
| CVE-2025-67744 | Critical (9.6) | 0.63% | — | Dec 16, 2025 | DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to version 0.5.3, a security vulnerability exists in the Mermaid diagram rendering component that allows… |
| CVE-2025-66481 | Critical (9.6) | 0.58% | — | Dec 9, 2025 | DeepChat is an open-source AI chat platform that supports cloud models and LLMs. Versions 0.5.1 and below are vulnerable to XSS attacks through improperly sanitized Mermaid content. The recent security patch for… |
| CVE-2025-66222 | Critical (9.6) | 0.61% | — | Dec 3, 2025 | DeepChat is a smart assistant uses artificial intelligence. In 0.5.0 and earlier, there is a Stored Cross-Site Scripting (XSS) vulnerability in the Mermaid diagram renderer allows an attacker to execute arbitrary… |
| CVE-2025-58768 | Critical (9.6) | 0.60% | — | Sep 9, 2025 | DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using `innerHTML` to set user content. Therefore, any… |
| CVE-2025-55733 | Critical (9.6) | 0.68% | — | Aug 19, 2025 | DeepChat is a smart assistant that connects powerful AI to your personal world. DeepChat before 0.3.1 has a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a… |