VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 8, 2024· Updated Jun 17, 2026

CVE-2024-31224

CVE-2024-31224

Description

GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable. Version 3.74 contains a patch for the issue. There are no known workarounds aside from upgrading to a patched version.

Affected products

3
  • Binary Husky/Gpt Academic2 versions
    cpe:2.3:a:binary-husky:gpt_academic:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:binary-husky:gpt_academic:*:*:*:*:*:*:*:*range: >=3.64-1,<3.74
    • (no CPE)range: >= 3.64, < 3.74
  • Gpt Academic/gpt_academicllm-fuzzy
    Range: 3.64 - 3.73

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.