CVE-2026-23523
Critical
Description
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrary local command execution on the victim’s machine. This vulnerability is fixed in 0.13.0.
SeverityCritical
CVSS9.6
Exploit probability—
ProductOpenagentplatform Dive
PublishedJan 16, 2026
First seenJan 16, 2026
Weakness typeCWE-94Code injection
How to fix
Update
- openagentplatform dive0.13.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openagentplatform dive | v < 0.13.0 | 0.13.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.