CVE-2026-43899

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:07+00:00| seen| https://t.me/shimiscyberworld/1370 2026-09-13 00:00:51+00:00| published-proof-of-concept| https://t.me/shimiscyberworld/1370...

CVE-2026-43899 DeepChat: Incomplete Fix for CVE-2025-55733 leads to Remote Code Execution via Markdown Links bypassing `isValidExternalUrl`

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves DeepChat vulnerable to an arbitrary protocol execution bypass RCE. While the patch correctly restricted...