FKIE_CVE-2025-58766

Vulnerability from fkie_nvd - Published: 2025-09-17 18:15 - Updated: 2025-09-18 13:43
Severity ?
9.0 (Critical) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Summary
Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later.
References
security-advisories@github.comhttps://github.com/dyad-sh/dyad/commit/1c0255ab126d3b38ae9e78b17cdab9a07e5f0185
security-advisories@github.comhttps://github.com/dyad-sh/dyad/commit/ebcf89ee6cead83a33add5ef1e19c8d4f9b4ce9b
security-advisories@github.comhttps://github.com/dyad-sh/dyad/security/advisories/GHSA-7fxm-c5xx-7vpq
Impacted products
Vendor Product Version
To clipboard 

{
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users\u0027 systems. The vulnerability affects the application\u0027s preview window functionality and can bypass Docker container protections.  An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application\u0027s security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later."
    },
    {
      "lang": "es",
      "value": "Dyad es un constructor de aplicaciones de IA local. Se ha descubierto una vulnerabilidad cr\u00edtica de seguridad de seguridad que afectaba a Dyad v0.19.0 y versiones anteriores que permite a los atacantes ejecutar c\u00f3digo arbitrario en los sistemas de los usuarios. La vulnerabilidad afecta la funcionalidad de la ventana de vista previa de la aplicaci\u00f3n y puede eludir las protecciones del contenedor Docker. Un atacante puede crear contenido web que se ejecuta autom\u00e1ticamente cuando la vista previa carga. El contenido malicioso puede romper los l\u00edmites de seguridad de la aplicaci\u00f3n y obtener control del sistema. Esto ha sido corregido en Dyad v0.20.0 y versiones posteriores."
    }
  ],
  "id": "CVE-2025-58766",
  "lastModified": "2025-09-18T13:43:34.310",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.0,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 2.3,
        "impactScore": 6.0,
        "source": "security-advisories@github.com",
        "type": "Secondary"
      }
    ]
  },
  "published": "2025-09-17T18:15:52.687",
  "references": [
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/dyad-sh/dyad/commit/1c0255ab126d3b38ae9e78b17cdab9a07e5f0185"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/dyad-sh/dyad/commit/ebcf89ee6cead83a33add5ef1e19c8d4f9b4ce9b"
    },
    {
      "source": "security-advisories@github.com",
      "url": "https://github.com/dyad-sh/dyad/security/advisories/GHSA-7fxm-c5xx-7vpq"
    }
  ],
  "sourceIdentifier": "security-advisories@github.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-94"
        }
      ],
      "source": "security-advisories@github.com",
      "type": "Secondary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.