FlyEnv versions before 4.18.0 fail to sanitize HTML that originates from markdown rendering and AI chat content before it is passed to Vue's v-html directive. This flaw allows an attacker to inject malicious scripts that will execute inside the Electron renderer process with full Node.js API availability, giving the attacker read/write access to the local filesystem. The weakness is an instance of untrusted client‑side HTML injection (CWE‑79).

The vulnerability affects FlyEnv deployments running any release prior to 4.18.0. No specific sub‑versions are listed; all versions older than the 4.18.0 release are presumed vulnerable.

The CVSS score of 5.3 classifies the risk as moderate. The EPSS score is not provided in the CVE data and the issue is not currently listed in the CISA KEV catalog. The likely attack vector involves an attacker supplying crafted markdown or chat content to the application—either locally or via a remote server that the user accesses. Because the malicious content executes with Node.js privileges, a successful exploitation could lead to arbitrary code execution and full filesystem compromise on the affected machine.