CVE-2026-108852: Deep Chat 1.4.7 through 2.5.1

Affected technology

Deep Chat · 1.4.7 through 2.5.1
OvidijusParsiunas

Description’s affected range: through 2.5.1

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · Active user interaction

What an attacker can do

Attackers can place crafted Markdown links in AI responses, addMessage content, or loaded history to execute script in the embedding page when victims click them. Vendor/CNA’s CVSS 4.0 assessment (base score 2.1/10) rates confidentiality, integrity and availability impact as none.