{"data":{"id":"eb0f2564-e0a1-4f46-afd9-d45bf1bf867a","title":"CVE-2025-58357: 5ire is a cross-platform desktop artificial intelligence assistant and model context protocol client. Version 0.13.2…","summary":"CVE-2025-58357 affects 5ire, a cross-platform desktop AI assistant and model context protocol client, in version 0.13.2. The chat page's script gadgets enable content injection attacks through malicious prompt injection pages, compromised MCP servers, and exploited tool integrations. The source does not state the attacker's resulting impact.","solution":"Fixed in version 0.14.0.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-58357","publishedAt":"2025-09-04T10:42:32.810Z","cveId":"CVE-2025-58357","cweIds":["CWE-79"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["prompt_injection"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["5ire"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"5ire content injection through chat page script gadgets","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00635,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T12:08:54.211Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-198","CAPEC-86"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"plugin","llmSpecific":true,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0051"],"fixes":[]}}