CVE-2025-55733: DeepChat is a smart assistant that connects powerful AI to your personal world

This month

CRITICAL 9.6DOWNGRADE

CVE-2025-55733 is a critical-severity flaw (CVSS 9.6) affecting deepchat. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

DeepChat is a smart assistant that connects powerful AI to your personal world. DeepChat before 0.3.1 has a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted deepchat: URL on any website, including a malicious one they control. When a victim visits such a site or clicks on the link, the browser triggers the app’s custom URL handler (deepchat:), causing the DeepChat applicat

Why this priority

Critical severity
Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	9.6 (Critical)
Attack vector	Network (remote)
Attack complexity	Low
Privileges needed	None
User interaction	Required
EPSS exploit chance	0.7% (top 48%)
CISA exploited list	No
Weakness	CWE-94
Published	2025-08-19
Last modified	2026-06-17

Publisher (CNA): GitHub, Inc. · Vendor: thinkinai

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2025-08-19 19:15 UTCPublished CVE record published
2026-06-17 09:42 UTCUpdated Record last modified

thinkinai deepchat DOWNGRADE

Affected: 0.3.0

Fixed in: no fixed release known

Safe to downgrade to: a release before 0.3.0

1. Check installed version

apt-cache policy deepchat || rpm -q deepchat || deepchat --version

2. No fixed release: DOWNGRADE to a release before 0.3.0 (Debian / Ubuntu)

apt-cache madison deepchat sudo apt install deepchat=<VERSION_BEFORE_0.3.0> sudo apt-mark hold deepchat

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list deepchat sudo dnf downgrade deepchat-<VERSION_BEFORE_0.3.0> sudo dnf versionlock add deepchat

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2025-55733?

deepchat: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2025-55733 being exploited?

CVE-2025-55733 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2025-55733 affect?

CVE-2025-55733 affects deepchat. Severity is critical (CVSS 9.6). DeepChat is a smart assistant that connects powerful AI to your personal world. DeepChat before 0.3.1 has a one-click remote code execution vulnerability. An attacker can exploit this vulnerability by embedding a specially crafted deepchat

How urgent is CVE-2025-55733?

Priority 52/100. Critical severity; Public exploit reference

Related CVEs

CVE-2025-66222 CRITICAL 9.6 UPGRADE DeepChat is a smart assistant uses artificial intelligence
CVE-2025-66481 CRITICAL 9.6 UPGRADE DeepChat is an open-source AI chat platform that supports cloud models and LLMs
CVE-2025-67744 CRITICAL 9.6 UPGRADE DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents
CVE-2025-58768 CRITICAL 9.6 UPGRADE DeepChat is a smart assistant uses artificial intelligence

References

← Back to latest CVEs