CVE Intelligence
Analysis AI-assisted

CVE-2026-22792: 5ire Desktop Assistant - Unsafe HTML Rendering Leading to Remote Code Execution

The 5ire desktop AI assistant and MCP client renders untrusted HTML unsafely before version 0.15.3, allowing injected event-handler attributes to run JavaScript in the renderer. The record states that this JavaScript can call exposed bridge APIs to create MCP servers, which may lead to remote command execution. The record says version 0.15.3 fixes the issue, and CISA KEV does not list this CVE.

Published Oct 24, 2026 · Updated Oct 24, 2026 · Ler em português

Overview

The 5ire desktop assistant and MCP client, before version 0.15.3, renders untrusted HTML without adequate sanitization. Injected event-handler attributes can then run JavaScript in the renderer context. See the GitHub advisory.

Impact

  • According to the record, script running in the renderer can call exposed bridge APIs, including one that creates MCP servers.
  • The record states this can lead to remote command execution. The GitHub advisory vector gives a base score of 9.6 (GitHub_M lists 9.7), rated critical.
  • The vector rates confidentiality, integrity and availability impacts as high.

Affected products and versions

  • The record lists 5ire (as 5ire 5ire and Nanbingxyz 5ire) as affected before version 0.15.3.
  • Version 0.15.3 is described as the fix, and a release tag is referenced.

Exploitation status

  • CISA KEV does not list this CVE in the record. No confirmed active exploitation appears in the sources consulted.
  • SSVC records exploitation as proof of concept and automatable as no. NVD tags the advisory reference as Exploit, which indicates exploit-related material exists but does not confirm exploitation in the wild.

Remediation and mitigation

  • Upgrade to version 0.15.3, the version that the record says fixes the issue.
  • Until the upgrade is applied, reduce exposure by avoiding rendering untrusted content in the application and limiting the sources the assistant processes.
  • Review configured MCP servers and remove any entries that were not created intentionally.

Detection guidance

  • Review the list of configured MCP servers for unexpected or unrecognized entries.
  • Monitor for unexpected child processes started by the 5ire application.

Limitations of the available information

  • The fixes list in the record is empty; the fixed version is taken from the description and release tag.
  • The record does not describe the affected platforms or whether non-default settings change exposure.
  • EPSS shows a probability of 0.00851 and a percentile of 0.57814 in the record.
  • Technical reproduction details are not included in this analysis.

Frequently asked questions

Which versions of 5ire are affected by CVE-2026-22792?

According to the record, 5ire versions before 0.15.3 are affected.

Is this vulnerability being actively exploited?

CISA KEV does not list this CVE, and no confirmed active exploitation appears in the sources consulted. The record gives SSVC exploitation as proof of concept.

What should administrators do first?

Upgrade to 0.15.3, the version the record says fixes the issue, and review configured MCP servers for entries that were not created intentionally.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.