What’s Vulnerable › Products

OpenAgentPlatform Dive vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your OpenAgentPlatform Dive version is affected

Latest OpenAgentPlatform Dive vulnerabilities

• CVE-2026-23523 — Dive allows One-click Remote Code Execution through Deep Links for MCP Install (CVSS 8.8)
• CVE-2025-66580 — Dive has Cross-Site Scripting vulnerability that can escalate to Remote Code Execution (CVSS 9.6)
• CVE-2025-58176 — Dive's improper processing of custom urls can lead to Remote Code Execution (CVSS 8.8)