Security readout for executives and security teams
Plain-English summary
CVE-2026-22792 affects 5ire, a desktop AI assistant and MCP client. Older versions render untrusted HTML unsafely, allowing malicious content to execute JavaScript inside the app. Because exposed bridge APIs can then create MCP servers, the issue can lead to remote command execution. Version 0.15.3 is the stated fix.
Executive priority
Treat as high-priority remediation for teams using 5ire. The flaw is critical and can lead to remote command execution, but the available sources indicate user interaction is required and do not confirm active exploitation.
Technical view
Prior to 5ire 0.15.3, unsafe HTML rendering allows untrusted HTML event attributes to execute in the renderer context. The advisory states that JavaScript can call exposed bridge APIs, including MCP server creation, enabling unauthorized MCP server creation and remote command execution. CVSS is 9.7, with network attack vector, low complexity, no privileges, and user interaction required.
Likely exposure
Exposure is limited to environments running nanbingxyz 5ire versions earlier than 0.15.3. Risk is highest where users open or process untrusted AI, chat, or HTML-like content inside 5ire. The CVSS vector indicates exploitation requires user interaction but no prior authentication.
Exploitation context
The provided sources do not show CISA KEV listing or confirmed active exploitation. The issue is still urgent because the advisory describes a direct path from unsafe HTML rendering to JavaScript execution and then remote command execution through exposed bridge APIs.
Researcher notes
Key areas to review are renderer HTML sanitization, event-attribute handling, Electron-style bridge exposure, and authorization around MCP server creation. The record maps to CWE-116 and cites version 0.15.3 as fixing the issue. Evidence is from the CVE record and GitHub advisory/release references only.
Mitigation direction
- Upgrade 5ire to version 0.15.3 or later.
- Review the GitHub security advisory for vendor guidance.
- Avoid processing untrusted content in vulnerable 5ire versions until upgraded.
- Assess whether unexpected MCP servers were created before remediation.
Validation and detection
- Inventory endpoints for installed 5ire desktop clients.
- Confirm each installed 5ire version is 0.15.3 or later.
- Review 5ire MCP server entries for unauthorized or unexpected additions.
- Check security monitoring for suspicious 5ire child processes or behavior.
- Document any systems still below 0.15.3 for remediation tracking.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-116: User-session and phishing behavior lookup
Client-side and session-facing weaknesses should be reviewed alongside initial-access and user-execution behaviors. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2026-22792 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Critical
- CVSS
- 9.7 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H2.86Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
9.7CriticalVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/nanbingxyz/5ire/security/advisories/GHSA-p5fm-wm8g-rffxCVE reference · x_refsource_CONFIRM
- https://github.com/nanbingxyz/5ire/releases/tag/v0.15.3CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Encoding or Escaping of Output
Improper Encoding or Escaping of Output represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.