CVE-2024-31224: falha crítica em binary-husky gpt_academic
GPT Academic: Pickle deserializing cookies may pose RCE risk
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.8epss 1.2%
GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable. Version 3.74 contains a patch for the issue. There are no known workarounds aside from upgrading to a patched version.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
binary-husky · gpt_academicCVEs relacionadas — binary-husky gpt_academic
No mesmo produto, das mais perigosas para as menos.
CVE-2025-10236MEDIUMbinary-husky gpt_academic LaTeX File latex_toolbox.py merge_tex_files_ path traversalEPSS 0.8%CVE-2023-33979MEDIUMgpt_academic's Configuration File vulnerable to File Information DisclosureEPSS 0.7%CVE-2025-25185HIGHGPT Academic allows arbitary file read by tarfile uncompress within softlinkEPSS 0.6%