CVE-2025-55733

CVE-2025-55733 is a critical remote code execution (RCE) vulnerability affecting ThinkInAI DeepChat versions prior to 0.3.1. An attacker can exploit this by embedding a specially crafted deepchat: URL on a website. When a victim visits such a site or clicks the link, the DeepChat application launches and processes the URL, leading to RCE on their machine. This vulnerability carries a CVSS score of 9.6 (CRITICAL) due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. User interaction is required for exploitation. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, with one mention on Mastodon highlighting its critical nature and urging immediate patching.