LLMMedium
CVE-2025-58357: 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client…
- Occurred
- Sep 4, 2025
- Published
- Sep 4, 2025
- Source
- NVD CVE
Summary
5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2 contains a vulnerability in the chat page's script gadgets that enables content injection attacks through multiple vectors: malicious prompt injection pages, compromised MCP servers, and exploited tool integrations. This is fixed in version 0.14.0.
Tags
- CVE
- CVE-2025-58357
- cvss:CRITICAL
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: Vulnerability in AI assistant's chat interface enabling prompt injection attacks, classified as LLM security issue with medium severity due to fix availability.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8