RCE in Dyad-Sh Dyad
CVE-2025-58766
Dyad is a local AI app builder. A critical security vulnerability has been discovered that affected Dyad v0.19.0 and earlier versions that allows attackers to execute arbitrary code on users' systems. The vulnerability affects the application's preview window functionality and can bypass Docker container protections. An attacker can craft web content that automatically executes when the preview loads. The malicious content can break out of the application's security boundaries and gain control of the system. This has been fixed in Dyad v0.20.0 and later.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.004 (32.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.0 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.
Affected products
- Dyad-sh Dyad — versions < 0.20.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- security-advisories@github.com (x_refsource_MISC)
Frequently asked questions
- What is CVE-2025-58766?
- CVE-2025-58766 is a critical-severity vulnerability in Dyad-Sh Dyad, classified under Code Injection. CVSS score: 9.0/10. Published 2025-09-17.
- How severe is CVE-2025-58766?
- Critical severity. CVSS v3 base score is 9.0 out of 10.
- Is CVE-2025-58766 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.