OpenAgentPlatform vulnerabilities
We track 3 vulnerabilities in OpenAgentPlatform products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 16, 2026.
Latest OpenAgentPlatform vulnerabilities
- 8.8 High severity
Dive: Improper Control of Generation of Code
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. Prior to 0.13.0, crafted deeplink can install an attacker-controlled MCP server configuration without sufficient user confirmation and can lead to arbitrar
- 9.6 Critical severity
Dive: Improper Neutralization of Input During Web Page Generation
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. A critical Stored Cross-Site Scripting (XSS) vulnerability exists in versions prior to 0.11.1 in the Mermaid diagram rendering component. The application a
- 8.8 High severity
Dive: Improper Control of Generation of Code
Dive is an open-source MCP Host Desktop Application that enables integration with function-calling LLMs. In versions 0.9.0 through 0.9.3, there is a one-click Remote Code Execution vulnerability triggered through a custom url value, `transport` in the JSON obj