CVE-2026-73032
Critical
Description
PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API requests, or a malicious custom LLM endpoint to execute arbitrary code in Zotero's chrome-privileged context, enabling file read/write, process execution, and access to all Zotero data.
SeverityCritical
CVSS9.6
Exploit probability—
ProductPapersgpt-for-zotero
PublishedAug 11, 2026
First seenAug 11, 2026
Weakness typeCWE-94Code injection
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| papersgpt papersgpt-for-zotero | v ≤ 0.6.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.