CVE-2026-43899: DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves DeepChat vulnera...

Added to the CISA Known Exploited Vulnerabilities catalog on 11 May 2026. Vendor: AI/ML. Product: artificial intelligence. CVSS score: 9.6.

DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents. Prior to v1.0.4-beta.1, An incomplete mitigation for CVE-2025-55733 leaves DeepChat vulnerable to an arbitrary protocol execution bypass (RCE). While the patch correctly restricted api.openEx...

Required action: Review and patch if applicable to your AI infrastructure.