GPT Academic: Pickle deserializing cookies may pose RCE risk
Priority MEDIUM 51CWE-502Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-502.
Summary
GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable. Version 3.74 contains a patch for the issue. There are no known workarounds aside from upgrading to a patched version.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01215 68th percentileScored 2026-11-07
Fix Fixed gpt_academic (binary-husky): 3.74
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| binary-husky | gpt_academic | 3.64 to before 3.74 | 3.74 | Patch available | CNA |
- gpt_academic Vendorbinary-husky Affected 3.64 to before 3.74 Fixed in 3.74 Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:binary-husky:gpt_academic:*:*:*:*:*:*:*:* | 3.64-1 to before 3.74 | Vulnerable | binary-husky |
- cpe:2.3:a:binary-husky:gpt_academic:*:*:*:*:*:*:*:* Versions 3.64-1 to before 3.74 Vulnerable ·binary-husky
Remediation
- Fix · CNA gpt_academic (binary-husky) Fixed in 3.74
Timeline
- 2026-10-02 Threatist record created from CVE-2024-31224
References
More binary-husky Gpt Academic vulnerabilities
- TI-2024-11495 Remote Code Execution in binary-husky/gpt_academic CVSS 3.0HIGH 8.8
- TI-2024-11494 Path Traversal in binary-husky/gpt_academic CVSS 3.0HIGH 8.8
- TI-2024-10228 Deserialization of Untrusted Data in binary-husky/gpt_academic CVSS 3.0HIGH 8.8
- TI-2024-10179 Local File Read (LFI) by Tarslip Symlink via arxiv_download() API in binary-husky/gpt_academic CVSS 3.0HIGH 8.8
- TI-2024-10153 Prompt Injection Leading to RCE in binary-husky/gpt_academic Plugin `manim` CVSS 3.0HIGH 8.8
- TI-2024-10150 Code Injection in binary-husky/gpt_academic CVSS 3.0HIGH 8.8
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences