gpt academic vulnerabilities and fixes

Recent CVEs affecting gpt academic, with upgrade or downgrade steps. 28 tracked.

Also searched as: gptacademic.

gpt academic has 28 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 6. Most recent: 2026-01-23. Highest priority: CVE-2026-0764 (score 60/100).

• CVE-2026-0764 CRITICAL 9.8 DOWNGRADE GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2026-0763 CRITICAL 9.8 DOWNGRADE GPT Academic run_in_subprocess_wrapper_func Deserialization of Untrusted Data Remote Code Execution Vulnerabil
• CVE-2026-0762 HIGH 8.1 DOWNGRADE GPT Academic stream_daas Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2025-25185 HIGH 7.5 MITIGATE GPT Academic provides interactive interfaces for large language models
• CVE-2025-10236 MEDIUM 4.3 UPGRADE A vulnerability has been found in binary-husky gpt_academic up to 3.91
• CVE-2025-0183 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt
• CVE-2024-31224 CRITICAL 9.8 UPGRADE GPT Academic provides interactive interfaces for large language models
• CVE-2024-12392 MEDIUM 6.5 DOWNGRADE A Server-Side Request Forgery (SSRF) vulnerability exists in binary-husky/gpt_academic version git 310122f
• CVE-2024-12391 MEDIUM 6.5 DOWNGRADE A vulnerability in binary-husky/gpt_academic, as of commit 310122f, allows for a Regular Expression Denial of
• CVE-2024-12390 HIGH 8.8 DOWNGRADE A vulnerability in binary-husky/gpt_academic version git 310122f allows for remote code execution
• CVE-2024-12389 HIGH 8.8 DOWNGRADE A path traversal vulnerability exists in binary-husky/gpt_academic version git 310122f
• CVE-2024-12388 MEDIUM 6.5 DOWNGRADE A vulnerability in binary-husky/gpt_academic version 310122f allows for a Regular Expression Denial of Service
• CVE-2024-12387 MEDIUM 6.5 DOWNGRADE A vulnerability in the binary-husky/gpt_academic repository, as of commit git 3890467, allows an attacker to c
• CVE-2024-11039 HIGH 8.8 UPGRADE A pickle deserialization vulnerability exists in the Latex English error correction plug-in function of binary
• CVE-2024-11037 MEDIUM 6.5 DOWNGRADE A path traversal vulnerability exists in binary-husky/gpt_academic at commit 679352d, which allows an attacker
• CVE-2024-11033 MEDIUM 6.5 DOWNGRADE A Denial of Service (DoS) vulnerability exists in the file upload feature of binary-husky/gpt_academic version
• CVE-2024-11031 HIGH 7.5 DOWNGRADE In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the
• CVE-2024-11030 HIGH 7.5 DOWNGRADE GPT Academic version 3.83 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability through its HotR
• CVE-2024-10986 HIGH 8.8 DOWNGRADE GPT Academic version 3.83 is vulnerable to a Local File Read (LFI) vulnerability through its HotReload functio
• CVE-2024-10956 HIGH 7.1 DOWNGRADE GPT Academy version 3.83 in the binary-husky/gpt_academic repository is vulnerable to Cross-Site WebSocket Hij
• CVE-2024-10954 HIGH 8.8 MITIGATE In the `manim` plugin of binary-husky/gpt_academic, versions prior to the fix, a vulnerability exists due to i
• CVE-2024-10950 HIGH 8.8 UPGRADE In binary-husky/gpt_academic version <= 3.83, the plugin `CodeInterpreter` is vulnerable to code injection cau
• CVE-2024-10948 MEDIUM 6.5 DOWNGRADE A vulnerability in the upload function of binary-husky/gpt_academic allows any user to read arbitrary files on
• CVE-2024-10819 HIGH 8.8 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability in version 3.83 of binary-husky/gpt_academic allows an attac
• CVE-2024-10812 MEDIUM 6.1 DOWNGRADE An open redirect vulnerability exists in binary-husky/gpt_academic version 3.83
• CVE-2024-10714 HIGH 7.5 DOWNGRADE A vulnerability in binary-husky/gpt_academic version 3.83 allows an attacker to cause a Denial of Service (DoS
• CVE-2024-10101 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability exists in binary-husky/gpt_academic version 3.83
• CVE-2024-10100 HIGH 7.5 DOWNGRADE A path traversal vulnerability exists in binary-husky/gpt_academic version 3.83

FAQ

How do I fix gpt academic vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is gpt academic being exploited right now?

None of the tracked gpt academic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which gpt academic CVE should I patch first?

CVE-2026-0764 currently ranks highest (60/100): GPT Academic upload Deserialization of Untrusted Data Remote Code Execution Vulnerability.

RSS feed for gpt academic · ← Back to latest CVEs