5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. In versions 0.15.2 and prior, an RCE vulnerability exists in useMarkdown.ts, where the markdown-it-mermaid plugin is initialized with securityLevel: 'loose'. This configuration explicitly permits the rendering of HTML tags within Mermaid diagram nodes. This issue has not been patched at time of publication.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- https://github.com/nanbingxyz/5ire/security/advisories/GHSA-5hpf-p8fw-j349 Exploit, Vendor Advisory
- https://github.com/nanbingxyz/5ire/security/advisories/GHSA-5hpf-p8fw-j349 Exploit, Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 9.6 · 5ireNVD modified 2026-10-19 22:10
Affected (CPE criteria) 1
cpe:2.3:a:5ire:5ire:*:*:*:*:*:*:*:*
References 5
- https://github.com/nanbingxyz/5ire/blob/c40d05a2b546094789fc727daa5383bb15034442/src/hooks/useMarkdown.ts#L156 Product
- https://github.com/nanbingxyz/5ire/commit/1fbe40d0bfbfe215370d45b9af856c286d67d3f2
- https://github.com/nanbingxyz/5ire/releases/tag/v0.15.2 Release Notes
- https://github.com/nanbingxyz/5ire/security/advisories/GHSA-5hpf-p8fw-j349 Exploit, Vendor Advisory
- https://github.com/nanbingxyz/5ire/security/advisories/GHSA-5hpf-p8fw-j349 Exploit, Vendor Advisory