5ire 0.13.2
Approved changes feed: RSS · Atom
cpe:2.3:a:5ire:5ire:0.13.2:*:*:*:*:*:*:*
part: a version: 0.13.2 update: *
| Vendor | 5Ire (352114ee-dc80-57a7-9780-eeb45ccd43f9) |
|---|---|
| Product | 5Ire (10f71b09-570d-5624-bdcf-d43d24b73eb3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58357 |
vulnerable | 2026-06-08 07:35:18.035734 |
5ire Chat Message XSS Vulnerability Enables Remote Code Execution
CRITICAL (9.7)
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt injection pages, compromised MCP servers, and exploited tool integrations. This is fixed in version 0.14.0.
Published: 2025-09-04T00:30:09.292Z
Updated: 2025-09-04T14:02:28.135Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.