Unrated severityNVD Advisory· Published Aug 27, 2026
CVE-2026-37006
CVE-2026-37006
Description
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code execution via malicious Model Context Protocol configurations.
Affected products
1- Range: <=0.14.7
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.