CVE-2024-31224
Critical
Description
GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable. Version 3.74 contains a patch for the issue. There are no known workarounds aside from upgrading to a patched version.
SeverityCritical
CVSS9.8
Exploit probability—
ProductBinary-husky Gpt Academic
PublishedApr 8, 2024
First seenApr 8, 2024
Weakness typeCWE-502Deserialization of untrusted data
How to fix
Update
- binary-husky gpt_academic3.74 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| binary-husky gpt_academic | 3.64-1 ≤ v < 3.74 | 3.74 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.