CVE-2024-31224
criticalpriority · track · 0EPSS 0.012 · 68 %ileEUUSEPSS · scored 2026-10-27
GPT Academic provides interactive interfaces for large language models. A vulnerability was found in gpt_academic versions 3.64 through 3.73. The server deserializes untrustworthy data from the client, which may risk remote code execution. Any device that exposes the GPT Academic service to the Internet is vulnerable. Version 3.74 contains a patch for the issue. There are no known workarounds aside from upgrading to a patched version.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (3)
Products and version ranges known to be affected.
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- https://cxsecurity.com/cveshow/CVE-2024-31224/cnnvd
- https://github.com/binary-husky/gpt_academic/commit/8af6c0cab6d96f5c4520bec85b24802e6e823f35cnnvd
- https://github.com/binary-husky/gpt_academic/pull/1648cnnvd
- https://github.com/binary-husky/gpt_academic/security/advisories/GHSA-jcjc-89wr-vv7gcnnvd
- https://github.com/binary-husky/gpt_academic/commit/8af6c0cab6d96f5c4520bec85b24802e6e823f35enisa_euvd
- https://github.com/binary-husky/gpt_academic/pull/1648enisa_euvd
- https://github.com/binary-husky/gpt_academic/security/advisories/GHSA-jcjc-89wr-vv7genisa_euvd
- https://github.com/binary-husky/gpt_academic/commit/8af6c0cab6d96f5c4520bec85b24802e6e823f35Patchnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan