CVE-2026-22792 5ire vulnerable to Remote Code Execution (RCE)

5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Prior to version 0.15.3, an unsafe HTML rendering permits untrusted HTML including on event attributes to execute in the renderer context. An attacker can inject an payload to run arbitrary...

5ire 跨站脚本漏洞

5ire is a cross-platform desktop AI assistant from the individual developer Ironben. A cross-site scripting vulnerability exists in 5ire version 0.13.2, which stems from content injection in the chat page script widget...

5ire 输入验证错误漏洞

5ire is a cross-platform desktop AI assistant from the individual developers at Ironben. An input validation error vulnerability exists in versions prior to 5ire 0.11.1, which stems from insufficient cleanup leading to stored cross-site scripting that could lead to remote code execution via...