CVE-2025-58766

Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later.

CVSS v3 9.0 CRITICAL

9.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://github.com/dyad-sh/dyad/commit/1c0255ab126d3b38ae9e78b17cdab9a07e5f0185
https://github.com/dyad-sh/dyad/commit/ebcf89ee6cead83a33add5ef1e19c8d4f9b4ce9b
https://github.com/dyad-sh/dyad/security/advisories/GHSA-7fxm-c5xx-7vpq

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Dyad es un constructor de aplicaciones de IA local. Se ha descubierto una vulnerabilidad crítica de seguridad de seguridad que afectaba a Dyad v0.19.0 y versiones anteriores que permite a los atacantes ejecutar código arbitrario en los sistemas de los usuarios. La vulnerabilidad afecta la funcionalidad de la ventana de vista previa de la aplicación y puede eludir las protecciones del contenedor Docker. Un atacante puede crear contenido web que se ejecuta automáticamente cuando la vista previa carga. El contenido malicioso puede romper los límites de seguridad de la aplicación y obtener control del sistema. Esto ha sido corregido en Dyad v0.20.0 y versiones posteriores.

17 Sep 2025, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-09-17 18:15

Updated : 2026-06-17 09:44

NVD link : CVE-2025-58766

Mitre link : CVE-2025-58766

CVE.ORG link : CVE-2025-58766

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

{"id": "CVE-2025-58766", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-58766", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-09-17T17:50:37.918784Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "dyad-sh", "product": "dyad", "versions": [{"status": "affected", "version": "< 0.20.0"}]}]}], "published": "2025-09-17T18:15:52.687", "references": [{"url": "https://github.com/dyad-sh/dyad/commit/1c0255ab126d3b38ae9e78b17cdab9a07e5f0185", "source": "security-advisories@github.com"}, {"url": "https://github.com/dyad-sh/dyad/commit/ebcf89ee6cead83a33add5ef1e19c8d4f9b4ce9b", "source": "security-advisories@github.com"}, {"url": "https://github.com/dyad-sh/dyad/security/advisories/GHSA-7fxm-c5xx-7vpq", "source": "security-advisories@github.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later."}, {"lang": "es", "value": "Dyad es un constructor de aplicaciones de IA local. Se ha descubierto una vulnerabilidad cr\u00edtica de seguridad de seguridad que afectaba a Dyad v0.19.0 y versiones anteriores que permite a los atacantes ejecutar c\u00f3digo arbitrario en los sistemas de los usuarios. La vulnerabilidad afecta la funcionalidad de la ventana de vista previa de la aplicaci\u00f3n y puede eludir las protecciones del contenedor Docker. Un atacante puede crear contenido web que se ejecuta autom\u00e1ticamente cuando la vista previa carga. El contenido malicioso puede romper los l\u00edmites de seguridad de la aplicaci\u00f3n y obtener control del sistema. Esto ha sido corregido en Dyad v0.20.0 y versiones posteriores."}], "lastModified": "2026-06-17T09:44:54.103", "sourceIdentifier": "security-advisories@github.com"}