CVE Feed

    Dashboard / CVE / CVE-2024-31224

    CVE-2024-31224

    GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable. Version 3.74 contains a patch for the issue. There are no known workarounds aside from upgrading to a patched version.

    Published:Apr 8, 2024
    Last Modified:Nov 4, 2025
    EPS:Apr 8, 2024
    EPSS Score:0.03127
    CVSS Score:9.8

    Affected Products

    Vendor
    Binary-husky
    Product
    Gpt Academic

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-586 Object Injection

    Related CVEs

    CVE-2026-0764 (CVSS 9.8) — GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability …
    CVE-2026-0763 (CVSS 9.8) — GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerabil…
    CVE-2026-0762 (CVSS 8.1) — GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerabi…
    CVE-2025-10236 (CVSS 2.1) — A vulnerability has been found in binary-husky gpt_academic up to 3.91. Impacted is the function merge_tex_fil…
    CVE-2024-12387 (CVSS 6.5) — A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to c…
    CVE-2024-10986 (CVSS 8.8) — GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload functio…
    CVE-2024-10954 (CVSS 8.8) — In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to i…
    CVE-2024-10950 (CVSS 8.8) — In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection cau…
    CVE-2024-12390 (CVSS 8.8) — A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution. The applica…
    CVE-2024-10714 (CVSS 7.5) — A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High